Close Open Privacy Scan

link https://github.com/run-llama/llama_index
bolt Snapshot: commit dbdaf89
science engine v1.21
schedule 2026-07-18T09:16:01.277273+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: anthropic, chromadb, cohere, google-generativeai +9 more — detected in dependencies, not a safety judgment.
Incomplete scan — only 0/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 772 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

2 high 48 medium 722 low
First-party packages: 57
Dependency packages: 0
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: accelerated-data-science.readthedocs.ioagent-search.readthedocs.ioai-gateway.helicone.aiai-gateway.vercel.shai.api.nvidia.comai.google.devaibadgr.comaip.baidubce.comairweave.aialg.liapi-anurag.eng.macrometa.ioapi-dev.vectorize.ioapi-staging.vectorize.ioapi.01.aiapi.agentql.comapi.aleph-alpha.comapi.anthropic.comapi.apertis.aiapi.app.predibase.comapi.asi1.aiapi.atlassian.comapi.bing.microsoft.comapi.brightdata.comapi.cerebras.aiapi.cloud.llamaindex.aiapi.cloudflare.comapi.cogniswitch.aiapi.cognitive.microsofttranslator.comapi.cometapi.comapi.contextual.aiapi.deepinfra.comapi.deepseek.comapi.docugami.comapi.elevenlabs.ioapi.endpoints.anyscale.comapi.featherless.aiapi.fireworks.aiapi.getguru.comapi.gitbook.comapi.github.comapi.groq.comapi.heroku.comapi.intercom.ioapi.isaacus.comapi.jina.aiapi.keywordsai.coapi.konko.aiapi.linear.appapi.llama.comapi.llmapi.comapi.llmrails.comapi.mangadex.orgapi.minimax.ioapi.mistral.aiapi.monday.comapi.netmind.aiapi.notion.comapi.novita.aiapi.olostep.comapi.openai.comapi.openalex.orgapi.parallel.aiapi.perplexity.aiapi.pipeshift.comapi.playgrounds.networkapi.polygon.ioapi.replicate.comapi.runllm.comapi.sambanova.aiapi.sarvam.aiapi.search.brave.comapi.serpex.devapi.siliconflow.cnapi.stackexchange.comapi.stackoverflowteams.comapi.stepfun.comapi.studio.nebius.aiapi.together.xyzapi.trytldw.aiapi.typecast.aiapi.upstage.aiapi.vectara.ioapi.vectorize.ioapi.x.aiapi.you.comapi.zenrows.comapihub.document360.ioapp.asana.comapp.getguru.comapp.hyperbrowser.aiapp.premai.ioapp.zenrows.comarxiv.orgastra.datastax.comatlassian-python-api.readthedocs.iobeta.api.smabbler.combrowserbase.comcdn.jsdelivr.netcdnapi-ev.kaltura.comchat-api.you.comchat.maritaca.aiclarifai.comcloud.baidu.comcloud.google.comcloud.llamaindex.aicloud.sambanova.aicognitiveservices.azure.comconfluence.atlassian.comconsole.llmrails.comdashboard.psychic.devdashscope.aliyuncs.comdashscope.oss-cn-beijing.aliyuncs.comdata.rcsb.orgdata.sec.govdemo.usememos.comdev.agentql.comdevcenter.heroku.comdeveloper.atlassian.comdeveloper.twitter.comdevelopers.cloudflare.comdevelopers.generativeai.googledevelopers.google.comdevelopers.llamaindex.aidevelopers.oxylabs.iodiscord.comdiscountingcashflows.comdocs.agentql.comdocs.aws.amazon.comdocs.claude.comdocs.firecrawl.devdocs.github.comdocs.helicone.aidocs.hyperbrowser.aidocs.igpt.aidocs.ioniccommerce.comdocs.litellm.aidocs.llamaindex.aidocs.modelslab.comdocs.mongodb.comdocs.neutrinoapp.comdocs.oracle.comdocs.perplexity.aidocs.predibase.comdocs.public.oneportal.content.oci.oraclecloud.comdocs.pydantic.devdocs.python-arango.comdocs.python.orgdocs.ray.iodocs.sambanova.aidocs.steamship.comdocs.sweep.devdocs.tonic.aidocs.vectara.comdocs.voyageai.comdocs.wandb.aidocs.you.comdocs.zyte.comdocumentation.you.comdownload.pytorch.orgdrive.google.comdynamicsessions.ioecc7deb6-26e0-419b-a7f2-0deb934af29a.monsterapi.aiefts.sec.goven.wikipedia.orgeutils.ncbi.nlm.nih.goveverlyai.xyzfastapi.mymagic.aifinance.yahoo.comfinnhub.iogateway.ai.cloudflare.comgenerativelanguage.googleapis.comgithub.comgitlab.comgo.boarddocs.comgoogleapis.devgpt-index.readthedocs.iograph.microsoft.comguides.mangoapps.comhelp.aliyun.comhelp.cleanlab.aihook.us1.make.comhostname.comhuggingface.coicanhazdadjoke.cominference.baseten.coinference.generativeai.us-chicago-1.oci.oraclecloud.comintegrate.api.nvidia.comjoplinapp.orglearn.microsoft.comllama.meta.comllm.api.cloud.yandex.netllm.monsterapi.ailocalai.iologin.microsoftonline.commintlify.s3.us-west-1.amazonaws.commodelslab.commy.telegram.orgmyapp.comneuml.github.ionewspaper.readthedocs.ionla.zapier.comnovita.aioai.endpoints.kepler.ai.cloud.ovh.netoctoai.cloudollama.comopen.bigmodel.cnopen.feishu.cnopen.larksuite.comopenrouter.aiopenweathermap.orgossrdbms-aad.database.windows.netovh.compandas.pydata.orgplaces.googleapis.complatform.claude.complatform.dappier.complatform.neutrinoapp.complatform.openai.complatform.parallel.aiplatform.quip.complatform.stepfun.complg.uwaterloo.capypi.nvidia.compypi.orgqdrant.github.iorayyan.aireadwise.iorealtime.oxylabs.iorealtime.oxyserps-dev.funrich.readthedocs.iorouter.neutrinoapp.comrsshub.apps.jina.ais3.amazonaws.comsandbox.oxylabs.iosarvam.aisc.lfeeder.comscrapfly.iosearch.patentsview.orgseekingalpha.comserpex.devsiliconflow.cnsmabbler.gitbook.iospider.cloudstackoverflow.comstatic.reuters.comsteamship.comstripe.comsupport.intercom.comtaginfo.openstreetmap.orgtinyurl.comunpkg.comus-south.ml.cloud.ibm.comus.helicone.aivercel.comwidget.runllm.comwww.algolia.comwww.alphavantage.cowww.bbc.comwww.bing.comwww.ebi.ac.ukwww.elastic.cowww.engadget.comwww.google.comwww.googleapis.comwww.helicone.aiwww.imdb.comwww.konko.aiwww.llamaindex.aiwww.ncbi.nlm.nih.govwww.pennystockflow.comwww.reuters.comwww.sec.govwww.seltz.aiwww.sitemaps.orgwww.w3.orgwww.wolframalpha.comwww.zyte.comx.comyandex.comydc-index.ioyour-endpointyour-webhook.comyour-work-spaceyour_resource_name.openai.azure.comyoursite.atlassian.com

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 → repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:89
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 → repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:100
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:139
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:156
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:168
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:169
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:110 → repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:105 → repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:113
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 → repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1072
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 → repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1079
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:58 → repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:66
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:58 → repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:76
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:26
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:28
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:35
medium first-party (python) PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:37
medium first-party (python) A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81
medium first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193
medium first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204
medium first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #62580d0a68368ad8 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b7683c8979589ae0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #fdeed7e6593b5a44 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:121 
            self._run.track(
                Text(llm_input),
                name="prompt",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #ae5e930cd8e71c8a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:128 
            self._run.track(
                Text(llm_output),
                name="response",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #4bab507d4fecab09 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:138 
                self._run.track(
                    Text(chunk),
                    name="chunk",
                    step=self._llm_response_step,
                    context={"chunk_id": chunk_id, "event_id": event_id},
                )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #6ddafe57aca10dd0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:10 
        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #539d3b9d97d3330a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:13 
        from opentelemetry.sdk import trace as trace_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #e3a6c19e0b6e77b0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:14 
        from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium pii_flow production #fb12397522011183 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #e791a6439865ff7f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:89 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:89 
            print(f"   Answer: {results[0] if isinstance(results, list) else results}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #171c20ba8ed58be8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:100 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:100 
        print(f"   ✅ Graph visualization saved to: {viz_path}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #570aedceda0c1418 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 
        response = requests.put(
            base_url + UPSERT_PIPELINE_ENDPOINT,
            data=json.dumps(pipeline_create),
            headers=headers,
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #a3da329684cea0b0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:139 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:139 
            print(f"Starting creating index {name}, pipeline_id: {pipeline_id}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #9dd594d4fa592739 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 
        response = requests.post(
            base_url + START_PIPELINE_ENDPOINT.format(pipeline_id=pipeline_id),
            headers=headers,
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #19364e9052133479 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:156 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:156 
            print(f"Starting ingestion for index {name}, ingestion_id: {ingestion_id}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #c98fe06b92946d20 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:168 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:168 
            print(f"ingestion_status {ingestion_status}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #198b8e010fe120d3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:169 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:169 
            print(f"failed_docs: {failed_docs}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #575e2336243e8067 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:110 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112 
    print(reader.load_data(document_ids=[os.environ.get("FEISHU_DOC_ID")]))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #c82584d96ed4453e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:113 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:105 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:113 
    print(reader.load_data(space_id, show_progress=True))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #fb0ee0a84faf90ea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1072 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1072 
            print(document.extra_info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #a9fe434648a1e69a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1079 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1079 
            print(document.extra_info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #77514139fd9f1e9f — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #ffc991a7cdb03e87 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 
        res = requests.get(url, auth=HTTPBasicAuth(self.username, self.api_key))

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #6aafa73a61120399 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #07635e9311a13242 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:66 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:58 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:66 
        response = requests.post(url, headers=headers, data=json.dumps(data))

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #765a2cf6ac954058 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:76 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:58 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:76 
                response = requests.put(next_url, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #3ef9a377f564eea9 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 
        response = requests.post(url=self.api_url, json=data, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #1c5c5e121638831a — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #cf14db3716da3e1b — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 
            response = requests.post(
                self.base_url,
                headers=headers,
                files=files,
                data={
                    "ocr": self.ocr,
                    "model": self.model,
                    "output_formats": f"['{self.output_format}']",
                    "coordinates": self.coordinates,
                    "base64_encoding": f"{self.base64_encoding}",
                },
            )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #c803609fd3941e8b — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #2c078b5612cf41fc — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #ecb8c4f7775903ba — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #9b6851933f790132 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 
        response = requests.get(url, auth=auth)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #6275c32784affffb — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 
        response = requests.post(
            f"{self.cv_url}?features={','.join(features)}&language={self.language}&api-version={self.api_version}",
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            json={"url": url},
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #79d3291aad2d7769 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 
        response = requests.get(
            ENDPOINT_BASE_URL + endpoint,
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            params={"q": query, "mkt": self.lang, "count": self.results},
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #a4dd7de4d54010e5 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 
        response = requests.get(url, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #ced8fa2cfee48b3c — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 
            response = requests.get(
                self.base_url,
                params=params,
                headers={
                    "Authorization": f"Bearer {self.api_key}",
                },
                timeout=30,
            )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #f2a2f92ee322a413 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:26 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:26 
        print(f"✅ Search returned {len(results)} results (as Document objects):")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #f425ea243f56ccce — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:28 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:28 
            print(f"\nResult {i}:")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #d9a75d2a4690c218 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:35 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:35 
        print(f"✅ Tool list has {len(tool_list)} tools:")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #0fce08e90a2a7d66 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:37 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:37 
            print(f"   - {t.metadata.name}: {t.metadata.description[:60]}...")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
medium pii_flow production #3a98e2903e129543 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 
        response = requests.get(url, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 526 low-confidence finding(s)
low env_fs test-only Excluded from app score #dbe076f82a2470e9 — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:30 
with open(data_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #70f03102467c5413 — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:77 
with open("conversation_docs.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bd943e115bf71d59 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:119 
    with open(MKDOCS_YML) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #469ce7d513aae782 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:144 
                    with open(toml_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d7b57a98ec94810f — Filesystem access.
repo/docs/scripts/prepare_for_build.py:176 
                    with open(os.path.join(full_path, module_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1008b55b491cca20 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:194 
    with open(MKDOCS_YML, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #aebabd251fb5fbde — Filesystem access.
repo/docs/scripts/prepare_for_build.py:202 
    with open("./src/content/docs/framework/CHANGELOG.md", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #125f7f5941e61a17 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:210 
    with open("./src/content/docs/framework/CHANGELOG.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #698fa68f6d995ba5 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:39 
        with open(
            os.path.join(output_path, "config.json"), "w", encoding="utf-8"
        ) as fOut:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc0c3814dff459dc — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:48 
        with open(os.path.join(input_path, "config.json"), encoding="utf-8") as fIn:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3beb90def0664851 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:259 
        aws_region = aws_region or os.getenv("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #354b505127122fe0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:260 
        aws_access_key_id = aws_access_key_id or os.getenv("AWS_ACCESS_KEY_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff0b61daaeb003e8 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:261 
        aws_secret_access_key = aws_secret_access_key or os.getenv(
            "AWS_SECRET_ACCESS_KEY"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #19bc43ecb2dd294e — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:264 
        aws_session_token = aws_session_token or os.getenv("AWS_SESSION_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad2363a5b2b3a2e0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:52 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a01467ebf6b934ec — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:53 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8dbbab7cd2482ca — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:55 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fbfbc3002c4faf09 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-cloudflare-workersai/llama_index/embeddings/cloudflare_workersai/base.py:90 
        response = self._session.post(
            API_URL_TEMPLATE.format(self.account_id, self.model), json={"text": texts}
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #6b3e97620c2c7e3a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-cloudflare-workersai/llama_index/embeddings/cloudflare_workersai/base.py:109 
            async with session.post(
                API_URL_TEMPLATE.format(self.account_id, self.model),
                json={"text": texts},
                headers=headers,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #89d83a26c41196bf — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-cohere/llama_index/embeddings/cohere/base.py:298 
            with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfe3b21996cdc995 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-deepinfra/llama_index/embeddings/deepinfra/base.py:75 
        self._api_token = api_token or os.getenv(ENV_VARIABLE, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c5a29a41caefb6f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-deepinfra/llama_index/embeddings/deepinfra/base.py:95 
            response = requests.post(
                url,
                json={
                    "inputs": chunk,
                },
                headers=self._get_headers(),
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7bd2abbefe599528 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-deepinfra/llama_index/embeddings/deepinfra/base.py:128 
                async with session.post(
                    url,
                    json={
                        "inputs": chunk,
                    },
                    headers=self._get_headers(),
                ) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #221030bddbe91314 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:34 
NEO4J_USERNAME = os.getenv("NEO4J_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #88d5998e3f590d20 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:35 
NEO4J_PASSWORD = os.getenv("NEO4J_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f1b2c9901aea0738 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:36 
NEO4J_URL = os.getenv("NEO4J_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7545e4a786584eac — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:37 
NEO4J_DATABASE = os.getenv("NEO4J_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a9c876d16b070a0b — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:327 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #a6c280cc2de9d855 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:426 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:35 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:426 
    print(response.response.split("<|assistant|>")[-1].strip())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs production #3303186d6f609c43 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:200 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef8a85d6b5684623 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:201 
        vertexai = vertexai_config is not None or os.getenv(
            "GOOGLE_GENAI_USE_VERTEXAI", False
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #402951a876b501e8 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe383bd18e5c1907 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #13c7836d54934564 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-heroku/llama_index/embeddings/heroku/base.py:163 
            response = self._client.post(
                f"{self.base_url}/v1/embeddings",
                json={
                    "input": text,
                    "model": self.model,
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #55fdc841f9bdee48 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-heroku/llama_index/embeddings/heroku/base.py:187 
            response = await self._aclient.post(
                f"{self.base_url}/v1/embeddings",
                json={
                    "input": text,
                    "model": self.model,
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #2ee3bb260ab1c957 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-huggingface/llama_index/embeddings/huggingface/utils.py:85 
        response = requests.get(pooling_config_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a352c68cf38b78bc — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:40 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5b8539d8098553b — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:41 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f7cbe7573792b52f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:51 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75113e3ff1fd6480 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:62 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #751d2c80e06e6dca — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:64 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef06f9ed68af418f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:66 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #272ff45b63852a92 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:76 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #304ee7b0fa3a76a7 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:81 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1d72372b5bf152c — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:90 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #76146b76de2c008c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-jinaai/llama_index/embeddings/jinaai/base.py:62 
        resp = self._session.post(  # type: ignore
            self.api_url,
            json=input_json,
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a29fd4fa27d5f11d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-jinaai/llama_index/embeddings/jinaai/base.py:117 
            async with session.post(
                self.api_url,
                json=input_json,
                headers=headers,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f24fd7c2f7e7bc0c — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-jinaai/llama_index/embeddings/jinaai/base.py:155 
    with open(file_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #eed0fd794ff772bc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-llm-rails/llama_index/embeddings/llm_rails/base.py:60 
            response = self.session.post(
                "https://api.llmrails.com/v1/embeddings",
                json={"input": [text], "model": self.model_id},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b8292235bb6ce704 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-llm-rails/llama_index/embeddings/llm_rails/base.py:93 
                response = await client.post(
                    "https://api.llmrails.com/v1/embeddings",
                    headers={"X-API-KEY": self.api_key},
                    json={"input": [text], "model": self.model_id},
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0af3c368a84a37ca — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai/llama_index/embeddings/mixedbreadai/base.py:84 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41904665a251b26e — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-netmind/llama_index/embeddings/netmind/base.py:35 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaf5d9cb271f2422 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-nvidia/llama_index/embeddings/nvidia/base.py:31 
        default_factory=lambda: os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d1e14f5676d1567e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-oci-data-science/llama_index/embeddings/oci_data_science/client.py:410 
            response = self._client.post(
                self.endpoint,
                headers=self._prepare_headers(headers=headers),
                auth=self.auth,
                json=payload,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4f84ce2be9df34ef — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-oci-data-science/llama_index/embeddings/oci_data_science/client.py:547 
            response = await self._client.post(
                self.endpoint,
                headers=self._prepare_headers(headers=headers),
                auth=self.auth,
                json=payload,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cfd007b6753d83b4 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-oci-genai/llama_index/embeddings/oci_genai/base.py:190 
                        with open(
                            oci_config.get("security_token_file"), encoding="utf-8"
                        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63ded6db719d8152 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-openai/llama_index/embeddings/openai/utils.py:154 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6a89b3255832e5ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-siliconflow/llama_index/embeddings/siliconflow/base.py:209 
            response = session.post(
                self.base_url, json=input_json, headers=self._headers
            ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d8a29b31972173cf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-siliconflow/llama_index/embeddings/siliconflow/base.py:228 
            async with session.post(
                self.base_url, json=input_json, headers=self._headers
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #719a84124e548532 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-text-embeddings-inference/llama_index/embeddings/text_embeddings_inference/base.py:88 
            response = client.post(
                f"{self.base_url}{self.endpoint}",
                headers=headers,
                json=json_data,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #be2de16f306784d2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-text-embeddings-inference/llama_index/embeddings/text_embeddings_inference/base.py:110 
            response = await client.post(
                f"{self.base_url}{self.endpoint}",
                headers=headers,
                json=json_data,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ce14b4c2de0163be — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-textembed/llama_index/embeddings/textembed/base.py:90 
        with requests.post(
            f"{self.base_url}/embedding",
            headers=headers,
            json=json_data,
            timeout=self.timeout,
        ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #057d06198d776e59 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-textembed/llama_index/embeddings/textembed/base.py:123 
            async with session.post(
                f"{self.base_url}/embedding",
                headers=headers,
                json=json_data,
                timeout=self.timeout,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #90a517b567326aa0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-together/llama_index/embeddings/together/base.py:29 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2f45f9d3317738c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-together/llama_index/embeddings/together/base.py:57 
            response = session.post(
                self.api_base.strip("/") + "/embeddings",
                headers=headers,
                json={"input": text, "model": model_api_string},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ee8b553510816809 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-together/llama_index/embeddings/together/base.py:100 
                response = await client.post(
                    self.api_base.strip("/") + "/embeddings",
                    headers=headers,
                    json={"input": text, "model": model_api_string},
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #66776801a8a1a183 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #98237a51d91c4b21 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:163 
                        async with session.post(
                            DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                        ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2b623a163df36341 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/util.py:60 
        with open(fn, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #804bea695db0da18 — Environment-variable access.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 
    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #907b8252d0699815 — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:133 
        with open(Path(persist_dir) / "multi_embed_store.pkl", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #945ff054b386352f — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:158 
            open(Path(persist_dir) / "multi_embed_store.pkl", "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1e99ed8927be7ba — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:78 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba75293eaa19cd21 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:79 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52651b0504e3e6aa — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:80 
        self._base_url = os.environ.get("DASHSCOPE_BASE_URL", None) or base_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d8d156f2d0c0b5b — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 
        workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f8b2547e9cb17b21 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 
        api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0a3479e189b756fb — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:115 
            or os.environ.get("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7d049b1f73c89c4f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 
        response = requests.put(
            base_url + UPSERT_PIPELINE_ENDPOINT,
            data=json.dumps(pipeline_create),
            headers=headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #fa6ccfc7a65465ce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 
        response = requests.post(
            base_url + START_PIPELINE_ENDPOINT.format(pipeline_id=pipeline_id),
            headers=headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9c305bae954ebe43 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:224 
        response = requests.put(
            self._base_url + INSERT_DOC_ENDPOINT.format(pipeline_id=pipeline_id),
            data=json.dumps(doc_insert),
            headers=self._headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c4c8dadace08b40a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:267 
        response = requests.post(
            self._base_url + DELETE_DOC_ENDPOINT.format(pipeline_id=pipeline_id),
            json=doc_delete,
            headers=self._headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a66a76c849ab1c4c — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:47 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37ef2c7d0d762aed — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:48 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c8a0444b18e7fc0 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:67 
            os.environ.get("DASHSCOPE_BASE_URL", None) or DASHSCOPE_DEFAULT_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1d8b2866ff0cb1a1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/utils.py:6 
    response = requests.post(base_url, headers=headers, json=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #73ef2e764151c070 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/utils.py:16 
    response = requests.get(base_url, headers=headers, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7dcaff308e983f78 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/utils.py:36 
        response = requests.get(
            request_url,
            headers=headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c889826c6e7830fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/base.py:402 
                    image_bytes = httpx.get(document.image_url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3c0e0257cf18fb94 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/base.py:561 
                    image_bytes = httpx.get(document.image_url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7958fb444763e044 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/base.py:631 
                    image_bytes = httpx.get(document.image_url).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #03b29efef78b12d9 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:25 
            self.api_key = os.getenv("LANCEDB_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #8b2930d9f25cdcbf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:288 
        image_bytes = httpx.get(query).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #045146e72420756d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:362 
        image_bytes = httpx.get(query).content

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ec10d634c8e47bc8 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:88 
            os.environ.get("VECTARA_CORPUS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed59460fee58e7bd — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:91 
        self._vectara_api_key = vectara_api_key or os.environ.get("VECTARA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f572f9d636978d31 — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:362 
        files = {"file": (filename, open(file_path, "rb"))}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #79900ef566ec2290 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:385 
        response = self._session.post(
            f"{self._base_url}/v2/corpora/{valid_corpus_key}/upload_file",
            files=files,
            verify=True,
            headers=headers,
            timeout=self.vectara_api_timeout,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d9a78d910f35fa2a — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 
        DASHSCOPE_API_KEY = os.environ.get("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe757a2436f31e37 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:87 
            os.getenv("DASHSCOPE_BASE_URL", "https://dashscope.aliyuncs.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6f906f8cc560e566 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 
            response = requests.post(
                service_url, data=json.dumps(my_input), headers=headers
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e24dcfc93cf32bb6 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank/llama_index/postprocessor/cohere_rerank/base.py:74 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d32353c424c4f6ad — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank/llama_index/postprocessor/dashscope_rerank/base.py:35 
            api_key = api_key or os.environ["DASHSCOPE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44df9d0736ff8de1 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank/llama_index/postprocessor/google_rerank/base.py:79 
            self.project_id = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05bf500f2b567f3e — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:37 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1480c62ed6ff4db3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:38 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dbb397183a01a137 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:48 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b9474c87c03f686c — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:59 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6e990e250fb939c8 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:61 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e8a1eb2450b1c9f8 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:63 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5bd1d4ff16a5201a — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:73 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c4030c8cb67ee4f8 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:78 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc74ddc8114dbfb3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:87 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #906c1660d7c4cfa9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-jinaai-rerank/llama_index/postprocessor/jinaai_rerank/base.py:87 
            resp = self._session.post(  # type: ignore
                self.api_url,
                json={
                    "query": query_bundle.query_str,
                    "documents": texts,
                    "model": self.model,
                    "top_n": self.top_n,
                },
            ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c8f3ce386d5dc563 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank/llama_index/postprocessor/mixedbreadai_rerank/base.py:56 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adda76709c959267 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:72 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #209b6dff9ccfd8df — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:174 
        response = client.get(url, headers=_headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #99ad1d429d1f9ecb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:318 
                response = client.post(url, headers=_headers, json=payloads)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #dfe5378a89868d3a — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank/llama_index/postprocessor/pinecone_native_rerank/base.py:38 
            api_key = api_key or os.environ["PINECONE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7ee0b9220c174453 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-siliconflow-rerank/llama_index/postprocessor/siliconflow_rerank/base.py:127 
            response = self._session.post(
                self.base_url,
                json={
                    "model": self.model,
                    "query": query_bundle.query_str,
                    "documents": texts,
                    "top_n": self.top_n,
                    **self._model_kwargs,
                },
            ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8666ee2a303eb3c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-tei-rerank/llama_index/postprocessor/tei_rerank/base.py:96 
            response = client.post(
                f"{self.base_url}/rerank",
                headers=headers,
                json=json_data,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a5f5749b9be4ffaf — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:127 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #66624c8232d80b19 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:265 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78cc98f897bb3f58 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:145 
            with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51d9ab6cc166ad36 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:245 
                with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #71f62b38842e0520 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-bilibili/llama_index/readers/bilibili/base.py:33 
            result = requests.get(sub_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0cc06bd6ceed73f0 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:29 
        if os.getenv("BITBUCKET_USERNAME") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8587c0855c0df81e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:31 
        if os.getenv("BITBUCKET_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #26ae18d48578ce1f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:44 
        username = os.getenv("BITBUCKET_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #baa7c3d86fd8ebdf — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:45 
        api_token = os.getenv("BITBUCKET_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #31742b0109c98fdf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:60 
            response = requests.get(repos_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d0376401df4061ff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:82 
        response = requests.get(content_url, headers=headers, params=query_params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #dd589b9cb6d6e583 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:114 
        response = requests.get(content_url, headers=headers, params=query_params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9edb1713be6f1e28 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-boarddocs/llama_index/readers/boarddocs/base.py:65 
        response = requests.post(meeting_list_url, headers=self.headers, data=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #aa1137f7bd902e54 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-boarddocs/llama_index/readers/boarddocs/base.py:89 
        response = requests.post(agenda_url, headers=self.headers, data=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #2d800013f099ec8a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:19 
    client_id = os.getenv("BOX_CLIENT_ID", "YOUR_BOX_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fab095e6ef009267 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:20 
    client_secret = os.getenv("BOX_CLIENT_SECRET", "YOUR_BOX_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #bf1f69d34c6c356d — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:23 
    enterprise_id = os.getenv("BOX_ENTERPRISE_ID", "YOUR_BOX_ENTERPRISE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0d33ca054c54befe — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:24 
    ccg_user_id = os.getenv("BOX_USER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b18be5d6d3760950 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-box/llama_index/readers/box/BoxAPI/box_api.py:161 
    with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #0320db2845012c72 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-box/llama_index/readers/box/BoxAPI/box_api.py:262 
    resp = requests.get(url, headers={"Authorization": f"Bearer {access_token}"})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f658025946c79849 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-chatgpt-plugin/llama_index/readers/chatgpt_plugin/base.py:24 
        self._bearer_token = bearer_token or os.getenv("BEARER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e4f31f95e2b86f5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-chatgpt-plugin/llama_index/readers/chatgpt_plugin/base.py:41 
        res = requests.post(
            f"{self._endpoint_url}/query", headers=headers, json={"queries": queries}
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2c29ba5eeddaacce — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:60 
        with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83325ce15a9a45ff — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:204 
                api_token = os.getenv(CONFLUENCE_API_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb3d636ee0bbc0b8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:210 
                    user_name = os.getenv(CONFLUENCE_USERNAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a1ff7b8fc401362c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:211 
                    password = os.getenv(CONFLUENCE_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #eb7a17308f92675e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-couchdb/llama_index/readers/couchdb/base.py:54 
        db = self.client.get(db_name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #fa5dba13a6f85659 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dad-jokes/llama_index/readers/dad_jokes/base.py:19 
        response = requests.get(
            "https://icanhazdadjoke.com/", headers={"Accept": "application/json"}
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #73645f29ad15d8f0 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:31 
DASHSCOPE_DEFAULT_DC_CATEGORY = os.getenv(
    "DASHSCOPE_DEFAULT_DC_CATEGORY", default="default"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39973a0fc49f0ca1 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:102 
            api_key = os.getenv("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3e7bb2500b0f0361 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:115 
            return os.getenv("DASHSCOPE_WORKSPACE_ID", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fed17561d0b8065 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:125 
            return os.getenv("DASHSCOPE_CATEGORY_ID", DASHSCOPE_DEFAULT_DC_CATEGORY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d4bb73dda02afb7 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:135 
                os.getenv("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14b0f365a3aae0dc — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:162 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #671112dd69c0ecce — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:169 
                response = await client.post(
                    url,
                    headers=headers,
                    json={
                        "lease_id": upload_file_lease_result.lease_id,
                        "parser": ResultType.DASHSCOPE_DOCMIND.value,
                    },
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #148b004a98980214 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:195 
                response = client.post(
                    url,
                    headers=headers,
                    json={
                        "file_name": os.path.basename(file_path),
                        "size_bytes": os.path.getsize(file_path),
                        "content_md5": get_file_md5(file_path),
                    },
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e16dfe33f5f004ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:239 
                    response = await client.post(
                        result_url, headers=headers, json={"file_id": data_id}
                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #205ebc8531d3b636 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:284 
                response = await client.post(
                    status_url, headers=headers, json={"file_id": data_id}
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cb978bb39c7b23c6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/domain/lease_domains.py:50 
                response = requests.put(self.url, data=file, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #aa484406e6cfd5a3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/domain/lease_domains.py:52 
                response = requests.post(self.url, data=file, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #186cfa6982044821 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/utils.py:30 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #b8523a835c23e00b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dashvector/llama_index/readers/dashvector/base.py:64 
        collection = self._client.get(collection_name)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9a3d00ed72bb19b8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-discord/llama_index/readers/discord/base.py:114 
            discord_token = os.environ["DISCORD_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc81ffa9225d2e43 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-docstring-walker/llama_index/readers/docstring_walker/base.py:116 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #814d0177372a7476 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:44 
    access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c90760ffe47d9e0e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:87 
        access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ffffb71555de9ae9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:220 
            response = requests.get(
                url,
                headers={"Authorization": f"Bearer {self.access_token}"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f11f294818b3a56c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:241 
            response = requests.request(
                "GET",
                url,
                headers={"Authorization": f"Bearer {self.access_token}"},
                data={},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #df82e6704934033b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:267 
            response = requests.request(
                "GET",
                url,
                headers={"Authorization": f"Bearer {self.access_token}"},
                data={},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #eebd9fe793b24f22 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:295 
                response = requests.request(
                    "GET",
                    f"{artifact_url}/content",
                    headers={"Authorization": f"Bearer {self.access_token}"},
                    data={},
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a7d0a74937157779 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:339 
        response = requests.request(
            "GET",
            url,
            headers={"Authorization": f"Bearer {self.access_token}"},
            data={},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b5238b64d8d91546 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-document360/llama_index/readers/document360/base.py:74 
        response = requests.request(
            method, url, headers=headers, params=params, data=data, json=json
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #dd1418d29c2cc7dd — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-earnings-call-transcript/llama_index/readers/earnings_call_transcript/utils.py:56 
    response = requests.get(
        f"https://discountingcashflows.com/api/transcript/{ticker}/{quarter}/{year}/",
        auth=("user", "pass"),
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e2e3a938ce64f423 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-elasticsearch/llama_index/readers/elasticsearch/base.py:81 
        res = self._client.post(f"{self.index}/_search", json=query).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2ebee90b6926f563 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-feedly-rss/llama_index/readers/feedly_rss/base.py:37 
            auth_file.write_text(auth.strip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fbc9986176ec5555 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:91 
        response = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d9fe9c5ed88f1983 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:99 
        response = requests.post(url, data=json.dumps(data), headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #710373c60329d761 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:109 
    app_id = os.environ.get("FEISHU_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00aa62bb723c8af5 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:110 
    app_secret = os.environ.get("FEISHU_APP_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce7919e6748f39d6 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112 
    print(reader.load_data(document_ids=[os.environ.get("FEISHU_DOC_ID")]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e33e5fdf4e094673 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/html/base.py:36 
        with open(file, encoding="utf-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43aa470d8e476d64 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/paged_csv/base.py:43 
        with open(file, encoding=self._encoding) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #415acec40c2216f0 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/rtf/base.py:35 
        with open(str(input_file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d9851123b36a11b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/tabular/base.py:49 
        with open(file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8068090e84115ce2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:97 
            with open(env_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #241905076f5b055e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:102 
                        os.environ[key.strip()] = value.strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d80f79213e98b855 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:105 
    api_token = os.getenv("GITBOOK_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #62e3fb4dab74263c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:106 
    space_id = os.getenv("GITBOOK_SPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ea4687fbd91523a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/gitbook_client.py:30 
            response = requests.get(url, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #77406064614dd18c — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:24 
    with open(key_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #51053cce178c1fdd — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:33 
    app_id = os.getenv("GITHUB_APP_ID", "123456")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9b9ffca3e6faff3e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:34 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID", "789012")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b5c329424bba353b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:37 
    private_key_path = os.getenv("GITHUB_PRIVATE_KEY_PATH", "path/to/your-app.private-key.pem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8c69ea3bddd09301 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:43 
        private_key = os.getenv("GITHUB_PRIVATE_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4b1e3971b70c49b2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:83 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #fbdb18860ef66d7c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:84 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6545ae122acc1707 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:85 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #8f974ebf38743d0b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:113 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:85 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:113 
    print(f"Loaded {len(documents)} Python files")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #ae033cb8320481dd — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:119 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #88acc24e10c0ec62 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:120 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #3c038fc2f4d20c67 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:121 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #a34e23affc15bd36 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:136 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:121 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:136 
    print(f"Token expires at: {github_app_auth._token_expires_at}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #d1ae696c5fb4705b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:147 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:121 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:147 
    print(f"New token fetched, expires at: {github_app_auth._token_expires_at}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #d7ed096a46c1c495 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:165 
    example = os.getenv("EXAMPLE", "basic")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5aaf8a8624a2c7d0 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/collaborators/github_client.py:103 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #66ab6440419ff827 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/github_app_auth.py:173 
                response = await client.post(url, headers=headers, timeout=10.0)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5ca6bea4b93294d3 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/issues/github_client.py:104 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cfe9cf6fe0f93b96 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 
    github_client = GithubClient(github_token=os.environ["GITHUB_TOKEN"], verbose=True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c21b95870d437dde — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/github_client.py:329 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d8fe83ad6bb48a2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/calendar/base.py:137 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aee9c8e6d78748c9 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/chat/base.py:281 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #42bd0308bfbb8035 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:125 
                with open("credentials.json") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16224ab16a19f05c — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:133 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1b62e743382c40dd — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:104 
            with open(credentials_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e88a8e6b10df755b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:108 
            with open(token_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a33cc5b7da13c24e — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:112 
            with open(service_account_key_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc2a6d6c0c00b340 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:196 
                with open(self.token_path, "w", encoding="utf-8") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d8982dc28ec9d20 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:485 
            with open(new_file_name, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80f8e17d7ef1a662 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:728 
            with open(downloaded_file, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06449e47de5ccdd2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/gmail/base.py:85 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea22f0bf5642d454 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/keep/base.py:58 
            with open("keep_credentials.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c6e60efa04c843c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:39 
        self.api_key = api_key or os.getenv("GOOGLE_MAPS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #cf35eb438a34efef — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #375e2bc0014a46d6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/sheets/base.py:205 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a8a7013c708262a4 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:44 
    with open(ignore_file_path) as ignore_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff2e9a5b0c55829d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:79 
                with open(file_path, errors="ignore", encoding=encoding) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #974d12104ea1c6dc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:75 
        response = requests.get(initial_url, auth=self.guru_auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ae0e24be6c6968d8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:88 
            response = requests.get(url, auth=self.guru_auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #85e9b51903eab808 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:111 
        response = requests.get(url, auth=self.guru_auth, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #44fea5cdc46eecbc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:155 
        response = requests.get(url, headers=headers, auth=self.guru_auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e836bcaaf5cf2723 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 
        res = requests.get(url, auth=HTTPBasicAuth(self.username, self.api_key))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #10fc98d99e371962 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:32 
        test_data = self.fs.read_bytes(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f651be1227c715a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:40 
                with open(tmp / "tmp.jsonl.gz", "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #31c01f9a0ef98de3 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-intercom/llama_index/readers/intercom/base.py:90 
        response = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d4d71b34e9279e2f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-jaguar/llama_index/readers/jaguar/base.py:255 
        with open("/tmp/debugjaguarrdr.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b5626cbbd4e8fcb5 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:73 
        if "JOPLIN_ACCESS_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #435a64dd1d0d2439 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:74 
            return os.environ["JOPLIN_ACCESS_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #08c1d2a360de0937 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:87 
            with urllib.request.urlopen(req_note) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #42f9c691f8a9b759 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:110 
        with urllib.request.urlopen(req_folder) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #674cd18a93e64ca5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:116 
        with urllib.request.urlopen(req_tag) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c1a88fa129e0c0ba — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-json/llama_index/readers/json/base.py:100 
        with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f5403c30136d4f6b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-kaltura/llama_index/readers/kaltura_esearch/base.py:177 
            return requests.get(cap_json_url).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #044d204b8e22398b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:69 
            os.environ["TIKA_SERVER_ENDPOINT"] = tika_server_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05236d879d28797f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:74 
            os.environ["TIKA_SERVER_JAR"] = tika_server_jar_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f6d65a7de03591e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:80 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a590e29337ceb75 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:83 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7d75e394668a792 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:90 
                os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87f4c6ec6d9c27c2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:101 
        os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f88c833b6495d096 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4eba11a9892fc384 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:66 
        response = requests.post(url, headers=headers, data=json.dumps(data))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #00557af3651a8ef4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-macrometa-gdn/llama_index/readers/macrometa_gdn/base.py:76 
                response = requests.put(next_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a52389b3c219597d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-make-com/llama_index/readers/make_com/base.py:47 
        r = requests.post(webhook_url, json=json_dict)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #bdbc5129125a56ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-mangadex/llama_index/readers/mangadex/base.py:23 
            manga_response = requests.get(
                f"{self.base_url}/manga", params={"title": title}
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7c0c253ecf14be33 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-mangadex/llama_index/readers/mangadex/base.py:43 
            author_response = requests.get(
                f"{self.base_url}/author", params={"ids[]": [id]}
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8fb77e2981dd0e73 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-mangadex/llama_index/readers/mangadex/base.py:56 
            chapter_response = requests.get(
                f"{self.base_url}/manga/{manga_id}/feed",
                params={
                    "translatedLanguage[]": [lang],
                    "order[chapter]": "asc",
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #2b228064b5a30aaf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-mangoapps-guides/llama_index/readers/mangoapps_guides/base.py:46 
                response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #5ed8a7d4273dfeff — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-mangoapps-guides/llama_index/readers/mangoapps_guides/base.py:120 
        response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #33c2146afd3a1c91 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-memos/llama_index/readers/memos/base.py:42 
            req = requests.get(realUrl, params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b031d4bb73da3e86 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:235 
            response = requests.get(endpoint, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #aaaa0b7620474074 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:273 
        file_data = requests.get(file_download_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #978d6b8f61c7d426 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:277 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #580837d373ee8e6b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:858 
            with open(local_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e4a222212d0ce5e5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:68 
        response = requests.post(token_url, data=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #14924f68f133b648 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76 
        response = requests.get(url, headers=self._authorization_headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #5e14b01b2d635005 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint/llama_index/readers/microsoft_sharepoint/base.py:414 
        response = requests.get(file_download_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0eb7f7c833232649 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint/llama_index/readers/microsoft_sharepoint/base.py:447 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #85e3aa8c823d7aac — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-notion/llama_index/readers/notion/base.py:36 
            integration_token = os.getenv(INTEGRATION_TOKEN_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #252cc6c17839ba5f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-notion/llama_index/readers/notion/base.py:116 
                response = requests.request(method, url, headers=headers, json=json)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0e5f79b3b935cf5a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 
            response = requests.get(full_url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3d750af547520f79 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 
            response = requests.get(full_url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4bd6889f078598a1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-opendal/llama_index/readers/opendal/base.py:73 
        with open(filepath, "wb") as w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e9e3224aad78724 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-oracleai/llama_index/readers/oracleai/base.py:134 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #279d220971b63b3e — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:43 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #524c4fffcb90a9eb — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:53 
                    resp = requests.get(
                        f"https://www.ncbi.nlm.nih.gov/research/bionlp/RESTful/pmcoa.cgi/BioC_json/PMC{_id}/ascii"
                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3d5e22999555b084 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:126 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ff1a7cc7de591040 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:138 
                    resp = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f42c71c40b9ca150 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:38 
            self.api_key = os.getenv("PATENTSVIEW_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e00427c0bdd14edf — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:65 
        response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b1e8e34f5b20bd5b — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:70 
            response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cd533161340189a7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pathway/llama_index/readers/pathway/base.py:60 
        response = requests.post(
            url,
            data=json.dumps(data),
            headers={"Content-Type": "application/json"},
            timeout=3,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #994be24391ea1efc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pathway/llama_index/readers/pathway/base.py:74 
        response = requests.post(
            url,
            json={},
            headers={"Content-Type": "application/json"},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #25a31395e07d3888 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pathway/llama_index/readers/pathway/base.py:98 
        response = requests.post(
            url,
            json={
                "metadata_filter": metadata_filter,
                "filepath_globpattern": filepath_globpattern,
            },
            headers={"Content-Type": "application/json"},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9b6d3c355fa123ca — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pdb/llama_index/readers/pdb/utils.py:10 
    pubmed_response = requests.get(pubmed_query)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #050eb95a9724d761 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pdb/llama_index/readers/pdb/utils.py:11 
    entry_response = requests.get(entry_query)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #96345081fff7a4b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pdb/llama_index/readers/pdb/utils.py:38 
    response = requests.get(f"{base_url}{pdb_id}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #fc4614e408f39e75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/base.py:139 
            resp = requests.post(
                load_doc_url, headers=headers, json=payload, timeout=20
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b20abaa6dd4c4b42 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/base.py:184 
            resp = requests.post(
                app_discover_url, headers=headers, json=payload, timeout=20
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #9a8d8820eb421938 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:16 
CLASSIFIER_URL = os.getenv("PEBBLO_CLASSIFIER_URL", "http://localhost:8000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #854ee4ce3a842f50 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:212 
        path=os.environ["PWD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78f8f5b1abc61b52 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-psychic/llama_index/readers/psychic/base.py:39 
            psychic_key = os.environ["PSYCHIC_SECRET_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4f49120499ef9d19 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-quip/llama_index/readers/quip/base.py:80 
                response = requests.request(method, url, headers=headers, json=json)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #0a7cf080d65d98ef — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:35 
            client_id=os.getenv("REDDIT_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11ab373c74edf237 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:36 
            client_secret=os.getenv("REDDIT_CLIENT_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #36e4ac9168bd456f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:37 
            user_agent=os.getenv("REDDIT_USER_AGENT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #719c1f87e48f89e2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:38 
            username=os.getenv("REDDIT_USERNAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ba605d619a1b234e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:39 
            password=os.getenv("REDDIT_PASSWORD"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #0363b4bf6955e5b0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-remote-depth/llama_index/readers/remote_depth/base.py:79 
        page = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #74fe5c3fbe71bf2b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-remote/llama_index/readers/remote/base.py:74 
        result = urlopen(req)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #16e0369b220f9a4a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-remote/llama_index/readers/remote/base.py:88 
                with open(filepath, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #af9d72a4b9293767 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-screenpipe/llama_index/readers/screenpipe/base.py:63 
        response = requests.get(url, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cfea303d7b85410d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:86 
                    with open(
                        f"data/{curr_tic}/{curr_year}/{curr_filing_type}.json", "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #845d8acc06884fce — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:92 
                    with open(
                        f"data/{curr_tic}/{curr_year[:-2]}/{curr_filing_type}_{curr_year[-2:]}.json",
                        "w",
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #525d66ce1256dbef — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/app.py:22 
allowed_origins = os.environ.get("ALLOWED_ORIGINS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec2e8e1385bafcde — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/section.py:223 
    allowed_mimetypes_str = os.environ.get("UNSTRUCTURED_ALLOWED_MIMETYPES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4a07be8be47e1e35 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:61 
    response = session.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #38990c6cc12f7b55 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:72 
    response = session.get(url, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #50f9f89883c856b2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:83 
    response = session.get(f"{SEC_SUBMISSIONS_URL}/{json_name}")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d3a954ec9569063b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:252 
        company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #559bc3a35847da20 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:254 
        email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #e0de30361b89859f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:332 
        response = session.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f3201dcd7421be2c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:345 
            company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86f7fe2c29f1c114 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:347 
            email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d047ffb00561a49c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/utils.py:146 
            resp = client.post(
                SEC_EDGAR_SEARCH_API_ENDPOINT, json=payload, headers=headers
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ca3e295ca728eeb8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:57 
        response = requests.get(url, headers=headers, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4163801f3d3e08dc — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:68 
            with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d9441923a76cf91 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:126 
                    pdf = PdfReader(open(file_path, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55995748ac3289d8 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:66 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bfceac791f9d4fc — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:147 
            with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13604ea9b043be42 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:208 
            with open(custom_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60cfc291400bd3b4 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:379 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da1aa991c6d22476 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-slack/llama_index/readers/slack/base.py:62 
            slack_token = os.environ["SLACK_BOT_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #67802672ace39403 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:75 
    resp = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #4b4a04e3dc094051 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:87 
        self._api_key = api_key or os.environ.get("STACKOVERFLOW_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #627d0455f2308f3a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:88 
        self._team_name = team_name or os.environ.get("STACKOVERFLOW_TEAM_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d4e3daebf1c5e46 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:107 
                    with open(fp) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #45e3e0cf5637b7b2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:116 
                    with open(
                        os.path.join(self._cache_dir, f"{doc_type}_{page}.json"), "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8fbbe0e55d31a9f4 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:170 
        os.environ.get("STACKOVERFLOW_PAT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #138d8043faaa5a30 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:171 
        os.environ.get("STACKOVERFLOW_TEAM_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #5d15d1d269360291 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-stripe-docs/llama_index/readers/stripe_docs/base.py:33 
        return urllib.request.urlopen(url).read()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #28a6d24b5c8c6cdd — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:372 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #25b09db66cc3f42c — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:400 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1d88033351ca89ff — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:95 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6b5c15560b77981 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:96 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #6e618b5a49da3ad1 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a30f9d8b712a9e2b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:356 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2f15ce5545a9aaf — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:388 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63a3654474517e29 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:408 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd90763a1541107c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:88 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ba28d74f71403e6 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:89 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #446fb2d747bf639a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 
            response = requests.post(
                self.base_url,
                headers=headers,
                files=files,
                data={
                    "ocr": self.ocr,
                    "model": self.model,
                    "output_formats": f"['{self.output_format}']",
                    "coordinates": self.coordinates,
                    "base64_encoding": f"{self.base64_encoding}",
                },
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #15a2163c3b385b33 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:381 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a09d06428d6acb1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:413 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1050bc6173440f1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:433 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2de4e113ce6a7394 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9eeeaccd29a05535 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/async_web/base.py:74 
                    async with session.get(url) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b9942d1282e6b0ab — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/beautiful_soup_web/base.py:42 
        page_link = requests.get(doc_link)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #bbe913c0a7e37ca4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/beautiful_soup_web/base.py:70 
        page_link = requests.get(doc_link)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0f421f58ea962221 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/beautiful_soup_web/base.py:112 
        page_link = requests.get(doc_link)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cb95ec388e151e1f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/beautiful_soup_web/base.py:189 
                page = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #527387a16c3733bd — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/hyperbrowser_web/base.py:36 
        api_key = api_key or os.getenv("HYPERBROWSER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #975fd5d02cf9d5a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/main_content_extractor/base.py:42 
            response = requests.get(url).text

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #22380be82b1f544f — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cb3a403ae8dd14eb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #1fd420364af77a6f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/readability_web/base.py:136 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #5083b3f724d8bd7e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/rss/base.py:55 
            parsed = feedparser.parse(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3cf36563c60f97f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/rss_news/base.py:86 
                feed = feedparser.parse(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a881916aa0e032db — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/simple_web/base.py:73 
                response = requests.get(url, headers=None, timeout=self._timeout)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #202e2924dd72ca2a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/sitemap/base.py:33 
        sitemap_url_request = httpx.get(sitemap_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #325dc0a11bf11504 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/zenrows_web/base.py:270 
        response = requests.get(
            self._base_url,
            params=params,
            headers=request_headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7581f5e640ee6f7d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:92 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #194cb7da34d9057d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:125 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d7bc9728ee323313 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:81 
            response = requests.post(
                self.endpoint, json={"query": query}, headers=self.headers
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b05e106d35103b1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:236 
            response = requests.get(content)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4bf460d14bc6be21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:277 
                response = requests.get(text)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #074a5d85c6c21dc4 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:285 
                with open(text) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #000fbda8056cbbb5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 
        response = requests.get(url, auth=auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9b8d099b6fb202aa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-zendesk/llama_index/readers/zendesk/base.py:86 
        response = requests.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bd0d2b146351f277 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-zulip/llama_index/readers/zulip/base.py:26 
        zulip_token = os.environ.get("ZULIP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2a7f24d9ca8a0463 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-zyte-serp/llama_index/readers/zyte_serp/base.py:73 
        results = self.client.get(serp_request)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2e14199aa1d8239d — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:214 
        with open(
            os.path.join(path, DEFAULT_PERSIST_FILENAME), "w", encoding=encoding
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c514cf66aededed4 — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:225 
        with open(os.path.join(path, DEFAULT_PERSIST_FILENAME), encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ee57cff0beecd663 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-galaxia/llama_index/retrievers/galaxia/base.py:66 
        conn = http.client.HTTPSConnection(self.api_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5bc90c4102da6139 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:48 
            if "MONGO_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd9046af1648a52c — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:54 
                os.environ["MONGO_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #dbb6e0817df4dda5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-pathway/llama_index/retrievers/pathway/base.py:67 
        response = requests.post(
            url,
            data=json.dumps(data),
            headers={"Content-Type": "application/json"},
            timeout=3,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #99c532f896ef7301 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-pathway/llama_index/retrievers/pathway/base.py:82 
        response = requests.post(
            url,
            json={},
            headers={"Content-Type": "application/json"},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #25108228f557a8a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-pathway/llama_index/retrievers/pathway/base.py:106 
        response = requests.post(
            url,
            json={
                "metadata_filter": metadata_filter,
                "filepath_globpattern": filepath_globpattern,
            },
            headers={"Content-Type": "application/json"},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7a994bd7a8684213 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-tldw/llama_index/retrievers/tldw/base.py:74 
        res = requests.post(
            f"{API_ENDPOINT}/search",
            headers=headers,
            json={
                "collection_id": self._collection_id,
                "search_term": query_bundle.query_str,
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d1778b6b14ca77c0 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-videodb/llama_index/retrievers/videodb/base.py:32 
            api_key = os.environ.get("VIDEO_DB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dca64e71e6fe0d7c — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:60 
        self._api_key = api_key or os.getenv("YDC_API_KEY") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c6fee1eb95a6ffb7 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:145 
                response = client.get(
                    _SEARCH_ENDPOINT,
                    params=params,
                    headers=headers,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #511dc2e8b3978573 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:168 
                response = await client.get(
                    _SEARCH_ENDPOINT,
                    params=params,
                    headers=headers,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f66e96cd88d2cb42 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:84 
            output = OpenAI(model=model, api_key=os.getenv("OPENAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #573c855c0ee1b0c3 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:88 
            output = Anthropic(model=model, api_key=os.getenv("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef272ec9a3366c22 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:92 
            output = Cohere(model=model, api_key=os.getenv("COHERE_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #553ca0d12730e6ba — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:96 
            output = MistralAI(model=model, api_key=os.getenv("MISTRALAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0cbdc39ef26d2f8a — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:100 
            output = TogetherLLM(model=model, api_key=os.getenv("TOGETHERAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #146b9cc4811db4ed — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-agentql/llama_index/tools/agentql/agentql_rest_api_tool/base.py:54 
        self._api_key = os.getenv("AGENTQL_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ff183e956c11ef99 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-agentql/llama_index/tools/agentql/utils.py:83 
            response = await client.post(
                EXTRACT_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #67e09bdcdfddb96f — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore/llama_index/tools/aws_bedrock_agentcore/utils.py:6 
    return os.getenv("AWS_REGION") or os.getenv("AWS_DEFAULT_REGION") or "us-west-2"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #32ecc3fbe5aa1587 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:87 
        self.pool_management_endpoint: str = pool_management_endpoint or os.getenv(
            "AZURE_POOL_MANAGEMENT_ENDPOINT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a81190fe8ca50aad — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176 
        response = requests.post(api_url, headers=headers, json=body)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d464dbf26f3cd949 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:192 
                            with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f20ddcf0390055ff — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:231 
            data = open(local_file_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fdae0a4ef8312d9b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:243 
        response = requests.request("POST", api_url, headers=headers, files=files)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #90f269ada715c451 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:277 
        response = requests.get(api_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #fd5dff2e8916c50f — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:281 
            with open(local_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #650f0c2532a11f26 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:301 
        response = requests.get(api_url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a85b8f0581dcc6a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 
        response = requests.post(
            f"{self.cv_url}?features={','.join(features)}&language={self.language}&api-version={self.api_version}",
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            json={"url": url},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #417ddf03961995c6 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-translate/llama_index/tools/azure_translate/base.py:32 
        request = requests.post(
            ENDPOINT_BASE_URL,
            params={"api-version": "3.0", "to": language},
            headers=self.headers,
            json=[{"text": text}],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a442f9fed148ab2e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 
        response = requests.get(
            ENDPOINT_BASE_URL + endpoint,
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            params={"q": query, "mkt": self.lang, "count": self.results},
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d35577e72eee889a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 
        response = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a990c56062045836 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:59 
        response = requests.post(
            self._endpoint, headers=self._headers, data=json.dumps(payload)
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #bb2ff1334c8e801f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:117 
        response = requests.post(
            self._endpoint, headers=self._headers, data=json.dumps(payload)
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d2432653b14ad593 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:124 
        with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f4a73ea78a7a24cc — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:308 
        trigger_response = requests.post(
            "https://api.brightdata.com/datasets/v3/trigger",
            params={"dataset_id": dataset_id, "include_errors": True},
            headers=self._headers,
            json=[request_data],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f6914aa8b66cb567 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:330 
                snapshot_response = requests.get(
                    f"https://api.brightdata.com/datasets/v3/snapshot/{snapshot_id}",
                    params={"format": "json"},
                    headers=self._headers,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9cf1c0a55b48f894 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-chatgpt-plugin/llama_index/tools/chatgpt_plugin/base.py:33 
            response = requests.get(manifest_url).text

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7f63985935a3d4de — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:33 
        elif os.environ["OPENAI_API_KEY"]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77964ce90f37ad24 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:34 
            self.OAI_token = os.environ["OPENAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1492da548a360680 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:97 
            response = requests.post(api_url, headers=headers, data=data, files=files)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7bd1c221752ea782 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:104 
                files = {"file": open(file, "rb")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #9c37cacc30262ac4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:112 
            response = requests.post(api_url, headers=headers, data=data, files=files)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0a5bf464e5b5a0b1 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:137 
        response = requests.post(api_url, headers=headers, data=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b181ff022ea01c1c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:157 
        response = requests.get(
            self.knowledge_status_endpoint,
            headers=self.headers,
            params=params,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #50d0597b9fa34cd0 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/ai_recommendations/base.py:35 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #590713c768d2604e — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/real_time_search/base.py:22 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5270a1d12b3bd61f — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-elevenlabs/llama_index/tools/elevenlabs/base.py:107 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #79e64bcc7414c09d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-finance/llama_index/tools/finance/earnings.py:19 
    response = requests.request(
        "GET",
        f"https://www.alphavantage.co/query?function=EARNINGS&symbol={symbol}&apikey={ALPHA_VANTAGE_API_KEY}",
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a94568f70a891e81 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:179 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3ed690971e2bd6e8 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:202 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad5def891539a872 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:116 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fbea2c261cd06c58 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:139 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #1d2026c2dcb952af — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/search/base.py:70 
            response = client.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #db216116a2d13e29 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/search/base.py:91 
            response = await client.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #d42442c1b8a0c4ba — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-graphql/llama_index/tools/graphql/base.py:33 
        res = requests.post(
            self.url,
            headers=self.headers,
            json={
                "query": query,
                "variables": variables,
                "operationName": operation_name,
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #084679ef874e6259 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-jina/llama_index/tools/jina/base.py:32 
        response = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c7455e0a8ea3f171 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:25 
        email: str = os.environ.get("JIRA_ACCOUNT_EMAIL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c17586dac0391256 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:26 
        api_key: Optional[str] = os.environ.get("JIRA_API_KEY", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2025426517c2d83 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:27 
        server_url: Optional[str] = os.environ.get("JIRA_SERVER_URL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #446ee8e0bed2b5e7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-mcp-discovery/llama_index/tools/mcp_discovery/base.py:60 
                async with session.post(
                    self.api_url, json={"need": user_request, "limit": limit}
                ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #cb44caa4f1fbf092 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-mcp/examples/mcp_server.py:38 
        access_token=os.environ.get("IPINFO_API_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #206032c54581f258 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:10 
    'hourly_weather': os.getenv('HOURLY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #40a8b6d2a3fecb9c — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:11 
    'daily_weather': os.getenv('DAILY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0ffd156947802a88 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:12 
    'daily_climate': os.getenv('DAILY_CLIMATE_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7698d0652155dbd5 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:13 
    'air_quality': os.getenv('AIR_QUALITY_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2f10f2f5f82d2241 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:14 
    'geocoding': os.getenv('GEOCODING_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #f767e43765e92771 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:23 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:10 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:23 
print(
    await agent.run("How's the temperature for New York in next 3 days?")
)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #70f851e5d476397e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:26 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:10 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:26 
print(
    await agent.run("What's the latitude and longitude of New York?")
)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #454cebc129b2da92 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:14 
    MOSS_PROJECT_KEY = os.getenv("MOSS_PROJECT_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d9d32b1e62a01ab2 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:15 
    MOSS_PROJECT_ID = os.getenv("MOSS_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #cf945e2cb2a57f13 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:55 
    llm = OpenAI(api_key=os.environ["OPENAI_API_KEY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #b2771281ba1f6442 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:66 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:55 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:66 
    print(response)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #4a7014c7465b5d25 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:72 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:55 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:72 
    print(response)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low egress production #b7eb52bd7f902695 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-notion/llama_index/tools/notion/base.py:106 
        response = requests.post(SEARCH_URL, json=payload, headers=self.reader.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #399840a9ef31822a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-openapi/llama_index/tools/openapi/base.py:35 
            response = requests.get(url).text

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b798eebf7e748097 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-parallel-web-systems/llama_index/tools/parallel_web_systems/base.py:112 
                response = await client.post(
                    f"{self.base_url}/v1beta/search",
                    headers=headers,
                    json=payload,
                    timeout=60,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #dc68a8f49d046a4a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-parallel-web-systems/llama_index/tools/parallel_web_systems/base.py:199 
                response = await client.post(
                    f"{self.base_url}/v1beta/extract",
                    headers=headers,
                    json=payload,
                    timeout=60,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #46850a88876e9193 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-playgrounds/llama_index/tools/playgrounds/subgraph_connector/base.py:69 
            response = requests.post(self.url, headers=self.headers, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #5e325cf45d4167e8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-playgrounds/llama_index/tools/playgrounds/subgraph_inspector/base.py:108 
            response = requests.post(self.url, headers=self.headers, json=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e3b4f08727272ae2 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-python-file/llama_index/tools/python_file/base.py:11 
        f = open(file_name).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2f413300293c8a01 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-requests/llama_index/tools/requests/base.py:56 
        res = requests.get(
            url,
            headers=self._get_headers_for_url(url_template),
            params=query_params,
            timeout=self.timeout_seconds,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #a44c37e46ff89f14 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-requests/llama_index/tools/requests/base.py:86 
        res = requests.post(
            url,
            headers=self._get_headers_for_url(url_template),
            params=query_params,
            json=body,
            timeout=self.timeout_seconds,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4e97298f5779588b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-requests/llama_index/tools/requests/base.py:148 
        res = requests.put(
            url,
            headers=self._get_headers_for_url(url_template),
            params=query_params,
            json=body,
            timeout=self.timeout_seconds,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #87ac510d71903188 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:8 
os.environ["SERPEX_API_KEY"] = "your_api_key_here"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #60524affdf4e3581 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:101 
    if not os.environ.get("SERPEX_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30ea3f825dd35356 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:55 
        self.api_key = api_key or os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #f69dcbe4fd72b24b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 
            response = requests.get(
                self.base_url,
                params=params,
                headers={
                    "Authorization": f"Bearer {self.api_key}",
                },
                timeout=30,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #242fd1777ff44795 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 
    api_key = os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f566496abbb5a2a — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:22 
    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #edeee63c68092f14 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:55 
    candidate = explicit or os.environ.get("SIGNNOW_MCP_BIN") or "sn-mcp"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #851a0dfc59623109 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-text-to-image/llama_index/tools/text_to_image/base.py:55 
                image=BytesIO(requests.get(url).content).getvalue(), n=n, size=size

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #723d6bb761dde7a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-text-to-image/llama_index/tools/text_to_image/base.py:74 
            plt.imshow(Image.open(BytesIO(requests.get(url).content)))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #db1252852371dde8 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-typecast/llama_index/tools/typecast/base.py:186 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2178e88843c13141 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:10 
    api_key=os.environ["VALYU_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #58a1292592ccfca3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:29 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:10 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:29 
print(search_response)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #fa19d4b22d680265 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:36 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:10 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:36 
print(content_response)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs test-only Excluded from app score #8f89be753d2c22e3 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/retriever_example.py:18 
        api_key=os.environ.get("VALYU_API_KEY", "your-api-key-here"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #4eb17228387bf816 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 
        response = requests.get(url, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #916e5272673f47fb — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-zapier/llama_index/tools/zapier/base.py:60 
        response = requests.get(
            "https://nla.zapier.com/api/v1/dynamic/exposed/", headers=self._headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cf191fe3e8af7a63 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-zapier/llama_index/tools/zapier/base.py:66 
        response = requests.post(
            ACTION_URL_TMPL.format(action_id=id),
            headers=self._headers,
            data=json.dumps(kwargs),
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #57b4ca01319818e6 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:111 
            if "AZURE_COSMOSDB_MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb11c01a2c0728b3 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:117 
                os.environ["AZURE_COSMOSDB_MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ecdaceb48fea217 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-db2/llama_index/vector_stores/db2/base.py:44 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0993122e1e4a5356 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:72 
            with open(ref_docs_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ffe2208d61ac8f95 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:123 
        with open(os.path.join(self._work_dir, "ref_docs.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e82c0c5455a22bc7 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:244 
        with open(id_map_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7918c6c19e7452ce — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:284 
        with open(id_map_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aaeff0145309ec2a — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:152 
        with open(config_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e24b145f406bd883 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:216 
        with open(config_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #091f0874a2ce3145 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar/llama_index/vector_stores/jaguar/base.py:497 
        with open("/tmp/debugjaguar.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b1fb65e4000c7d2 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:230 
            if api_key is None and os.getenv("LANCE_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #adb3c3bd9f509c08 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:242 
                    uri, api_key=api_key or os.getenv("LANCE_API_KEY"), region=region

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #534756934d41a205 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:188 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c111562f3cd58eb — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:194 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4d1d9327169f384 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:203 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0962f7097cc33ba — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:209 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #294160ead3e53877 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh/llama_index/vector_stores/moorcheh/base.py:103 
            self.api_key = os.getenv("MOORCHEH_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #521c7ca7079f1607 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb/llama_index/vector_stores/oracledb/base.py:51 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d48f3a45c4364c53 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:51 
    elif not api_key and not getenv("ROCKSET_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3985ba184bfe8da2 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:57 
            api_key=api_key or getenv("ROCKSET_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f8581dd8053dd84 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:58 
            host=api_server or getenv("ROCKSET_API_SERVER"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #054dfc37918cfe95 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:125 
        with open(config_path, "r" if jsonconfig else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99870dab7e6b5eca — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:189 
        with open(
            config_path,
            "w" if jsonconfig else "wb",
            encoding="utf-8" if jsonconfig else None,
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d5a6df2752775892 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch/llama_index/vector_stores/vertexaivectorsearch/base.py:100 
    ENABLE_V2 = os.getenv("VERTEX_AI_ENABLE_V2", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7a2aa089441ffdc8 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:26 
EMBEDDING_MODEL = os.getenv("ARK_EMBEDDING_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7a9e2dd370b03de7 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:30 
LLM_MODEL = os.getenv("ARK_LLM_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6f1432849174d473 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 
ARK_API_KEY = os.getenv("ARK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4ed87b83f38e0169 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:141 
    host = os.getenv("VEM_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #68ee6b11c5c11153 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:142 
    port = int(os.getenv("VEM_PORT")) if os.getenv("VEM_PORT") else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #60e07c4c6fc23ead — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:143 
    user = os.getenv("VEM_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a35a921ac7cc256d — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:144 
    password = os.getenv("VEM_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f9838962bc778869 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:145 
    database = os.getenv("VEM_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #e17fed3b9c21995a — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:146 
    table_name = os.getenv("VEM_TABLE", "llamaindex_demo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low pii_flow test-only Excluded from app score #0158e28f4f879356 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:237 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:237 
    print(f"Top {len(result.nodes)} results:")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #d21f0af4b9276088 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:241 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:241 
            print(f"  {i}. similarity={sim:.4f}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #30a4319f7f7c37ea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:243 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:243 
            print(f"  {i}.")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #7dc248ac21cb0139 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:245 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:245 
        print(f"     metadata={node.metadata}")

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low pii_flow test-only Excluded from app score #bf25bfc869701107 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process. Non-production path — not application runtime.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:261 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:261 
    print(answer)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.
low env_fs production #d0ae5ee52018f965 — Environment-variable access.
repo/llama-index-integrations/voice_agents/llama-index-voice-agents-openai/llama_index/voice_agents/openai/base.py:74 
            openai_api_key = os.getenv("OPENAI_API_KEY", None) or self.api_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #7a054827591e85bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-utils/llama-index-utils-huggingface/llama_index/utils/huggingface/base.py:85 
        response = requests.get(pooling_config_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #22e1b807703f1668 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-utils/llama-index-utils-qianfan/llama_index/utils/qianfan/apis.py:61 
    resp_dict = client.post(url, json=json)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #5d6379ede92eb652 — Filesystem access.
repo/scripts/bulk-version-bump.py:26 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0e2a12cd09a7107d — Filesystem access.
repo/scripts/bulk-version-bump.py:28 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1672dd8f3c1c2085 — Filesystem access.
repo/scripts/bulk-version-bump.py:81 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #11f3827405edf6b8 — Filesystem access.
repo/scripts/convert-examples.py:204 
        out.write_text(body, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7109432681958465 — Filesystem access.
repo/scripts/convert-examples.py:231 
            meta.write_text(f"label: {transform_dir_name(d.name)}\ncollapsed: true\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #19885cb00e0aed6d — Filesystem access.
repo/scripts/convert-examples.py:259 
    content = src.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d6aa573cedb8574d — Filesystem access.
repo/scripts/convert-examples.py:263 
    dst.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #12a21e59f5c3205d — Filesystem access.
repo/scripts/convert-examples.py:400 
    (int_dest / "_meta.yml").write_text(
        "label: Integrations\ncollapsed: true\norder: 998\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f9f8b658496b0550 — Filesystem access.
repo/scripts/integration_health_check.py:207 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #21f10dc51561f6e8 — Filesystem access.
repo/scripts/integration_health_check.py:273 
            with open("./core_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2d1ce3ac091bee1b — Filesystem access.
repo/scripts/integration_health_check.py:286 
            with open("./core_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #6a0e8e2dcd58f151 — Filesystem access.
repo/scripts/integration_health_check.py:366 
        with open("./all_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b560686d2228c3e8 — Filesystem access.
repo/scripts/integration_health_check.py:374 
        with open("./all_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/observability/llama-index-observability-otel

python first-party
medium telemetry production #834d1970f5f97dc5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:13 
from opentelemetry import context, propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #9b511942a9a38ec6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:14 
from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #7ccf0f26a67d7e6e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:15 
from opentelemetry.sdk.trace import SpanProcessor, TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #fe6cb3e5467f9300 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:16 
from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,
    ConsoleSpanExporter,
    SimpleSpanProcessor,
    SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b98c7bcafd45ab45 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:22 
from opentelemetry.trace import set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk

python first-party
medium pii_flow production #0495a06f217b656d — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 
        response = requests.post(self._endpoint, json=data, headers=headers)

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
medium pii_flow production #04e4d3606eb46a14 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 
            response = requests.post(
                self._endpoint, json=data, headers=headers, stream=True
            )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 4 low-confidence finding(s)
low env_fs production #7c80e52a4cb9341d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:138 
        self.api_key = self.api_key or os.getenv("MARITALK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #20f992cad6adaef5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 
        response = requests.post(self._endpoint, json=data, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c20ed4cc311fb8ea — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:245 
                response = await client.post(
                    self._endpoint, json=data, headers=headers, timeout=None
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #900a64f4f68763bf — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 
            response = requests.post(
                self._endpoint, json=data, headers=headers, stream=True
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic

python first-party
medium pii_flow production #a8b8acf6252b87f6 — A credential read from the environment/filesystem is applied as authorization on the same outbound request (auth header). This is intentional authentication, not unexpected data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 · flow /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → /tmp/closeopen-nsb162rn/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 
        resp = requests.post(
            self.completion_url,
            json=question_data,
            headers=headers,
        )

A credential read from the environment/filesystem is applied as authorization on the same outbound request (an auth header). This is intentional authentication to the service the credential belongs to, not unexpected data exfiltration.

Fix: Confirm the destination is the credential's own service; scope the credential and avoid logging it. No action if this is the intended authenticated API call.
expand_more 4 low-confidence finding(s)
low egress production #b583ddbf96e931a0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:147 
            resp = await client.post(
                self.completion_url,
                json=question_data,
                headers=headers,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #055dab492a22b95c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:159 
            resp = await client.get(url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #28c22379e9ddc7f6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 
        resp = requests.post(
            self.completion_url,
            json=question_data,
            headers=headers,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #52b15e9ac0ca95fe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:204 
        response = requests.get(url, timeout=600.0)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-dev

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #fa1f42c981570d96 — Environment-variable access.
repo/llama-dev/llama_dev/pkg/cmd_exec.py:44 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0d9f272b35a7d096 — Filesystem access.
repo/llama-dev/llama_dev/release/changelog.py:84 
    with open(repo_root / "CHANGELOG.md", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #664cf595a3bdd99a — Filesystem access.
repo/llama-dev/llama_dev/release/check.py:20 
    with open(repo_root / "llama-index-core" / "pyproject.toml", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2b87a8668dc9f0d4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-dev/llama_dev/release/check.py:29 
        with urllib.request.urlopen(url, timeout=10) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2108a9bc6075bbdd — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:16 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c44772637c889c98 — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:23 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #716fa9f1b1f0270c — Filesystem access.
repo/llama-dev/llama_dev/utils.py:46 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #35d91d352732680c — Filesystem access.
repo/llama-dev/llama_dev/utils.py:55 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c352f60e010c88d — Filesystem access.
repo/llama-dev/llama_dev/utils.py:74 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-core

python first-party
expand_more 43 low-confidence finding(s)
low env_fs production #85d77dd5bd20621a — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:320 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3fa0dab4e889b8db — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:321 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #904aba7a39546719 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:119 
    with open(mappings_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #151d2ee6455be1a8 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:206 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ca8418f7bd9ef911 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:246 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75ece583adbbe18b — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:251 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2380fe9855df74b8 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:257 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0883a7d5960b91b — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:18 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8c3e51be619f40ec — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:24 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f96ac65fd30f2359 — Environment-variable access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:43 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d3dd8c215b7e4965 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:38 
                save_file = open(
                    os.path.join(dataset_full_path, "dev_distractor.json"), "wb"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #9c468d7c2bffa7f9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:41 
                response = requests.get(url, stream=True)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #17724d5286e13644 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:74 
        f = open(dataset_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #05f8df286f29ea87 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:102 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #621d6f29573fb68e — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:108 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #58367b0de8904877 — Environment-variable access.
repo/llama-index-core/llama_index/core/evaluation/retrieval/metrics.py:444 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6f3a98aa27c9a68 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:24 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b80ae83f53e98d0 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:25 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c55ac558afe257a — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:26 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71e85a16b7b0132e — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:43 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2348d6a9a06e4229 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:44 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2abbd83cfa6bbaa3 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:45 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b6a7dfa37d12ea4 — Environment-variable access.
repo/llama-index-core/llama_index/core/llms/utils.py:42 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5245d5ab937f0eb5 — Filesystem access.
repo/llama-index-core/llama_index/core/multi_modal_llms/generic_utils.py:44 
    with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #18bad43c682eb88d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/multi_modal_llms/generic_utils.py:79 
            response = requests.get(image_document.image_url, timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #2ad02b06b7fb65d2 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:204 
            with open(obj_node_mapping_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1bcc5070c6fa450e — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:217 
            with open(obj_node_mapping_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #950dd6dc51607551 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/query_engine/cogniswitch_query_engine.py:44 
        response = requests.post(
            self.knowledge_request_endpoint,
            headers=self.headers,
            data=data,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #87ff82b206a6c1ea — Filesystem access.
repo/llama-index-core/llama_index/core/readers/json.py:102 
            with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #73fd55e5432749c9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/response/notebook_utils.py:128 
            img_response = requests.get(img_node.image_url, timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c2669e86fd10e8a4 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/schema.py:908 
            response = requests.get(self.image_url, timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #952b4293fd511791 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/schema.py:1320 
        response = requests.get(url, stream=True, timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #a8ca55b1f9873612 — Filesystem access.
repo/llama-index-core/llama_index/core/schema.py:1433 
            img_bytes = self.image_resource.path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fc69f21f0d928d75 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/schema.py:1439 
            response = requests.get(str(self.image_resource.url), timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #5d2b328824ec096b — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:56 
        if "NLTK_DATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1bfa0c314ff75ec — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:57 
            self._nltk_data_dir = str(Path(os.environ["NLTK_DATA"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5feb4791e6c2c66a — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:167 
        if "TIKTOKEN_CACHE_DIR" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11b33e16a0f7aa7e — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:169 
            os.environ["TIKTOKEN_CACHE_DIR"] = os.path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5780207933e11547 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:179 
            del os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0edf69402e2dde95 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:442 
    if "LLAMA_INDEX_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #875a68e30a4565a8 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:443 
        path = Path(os.environ["LLAMA_INDEX_CACHE_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #330dc645d63c2be7 — Filesystem access.
repo/llama-index-core/llama_index/core/utils.py:664 
        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #ff372920b112c3e6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-core/llama_index/core/utils.py:704 
        response = requests.get(url, headers=headers, timeout=(60, 60))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/graph_stores/llama-index-graph-stores-nebula

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #71271728bcbaa1c4 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:213 
            key in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd369f2893201c4c — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:221 
        graphd_host, graphd_port = os.environ["NEBULA_ADDRESS"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5510b0cd55026a6d — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:223 
            os.environ["NEBULA_USER"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5bccadac5790d2a — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:224 
            os.environ["NEBULA_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-aibadgr

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #823bd428ddbd86f5 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:41 
        api_key = api_key or os.environ.get("AIBADGR_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80ecb3211827d906 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:42 
        api_base = os.environ.get("AIBADGR_BASE_URL", api_base)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-asi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #2f92387ac20194e2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-asi/llama_index/llms/asi/base.py:65 
        api_key = api_key or os.environ.get("ASI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-azure-openai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #8acfd89f3a2aaa30 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/base.py:236 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6455c5fc8a96fd91 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:141 
            api_key = api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d74f273d72c4f5 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:223 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-baseten

python first-party
expand_more 1 low-confidence finding(s)
low egress production #ebe964ef15b7fca5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-baseten/llama_index/llms/baseten/base.py:201 
            async with session.post(
                DEFAULT_ASYNC_API_BASE.format(model_id=self.model),
                headers=headers,
                json=payload,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-cerebras

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #89d6dc059d967b7c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:32 
        api_base: str = os.environ.get("CEREBRAS_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8cf8eea1283e2c4a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:37 
        api_key = api_key or os.environ.get("CEREBRAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-clarifai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #f0c0af84d60f7137 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:83 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59a9ff54528f79d6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:84 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40bdafdb93476d54 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:86 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-cloudflare-ai-gateway

python first-party
expand_more 1 low-confidence finding(s)
low egress production #d6a9c669aece7b87 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cloudflare-ai-gateway/llama_index/llms/cloudflare_ai_gateway/base.py:325 
            response = client.post(url, json=request_body, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-cortex

python first-party
expand_more 20 low-confidence finding(s)
low env_fs production #d6cea7b7c686d93e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:111 
        default=os.environ.get("SNOWFLAKE_USERNAME", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #370e5b732ec3b913 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:115 
        default=os.environ.get("SNOWFLAKE_ACCOUNT", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bea243a2d2ea1e93 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:119 
        default=os.environ.get("SNOWFLAKE_KEY_FILE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dcbcbd4c491087d8 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:172 
        self.user = user or os.environ.get("SNOWFLAKE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b86adac27bbe54f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:173 
        self.account = account or os.environ.get("SNOWFLAKE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2103df257d129344 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:177 
        env_key_file = os.environ.get("SNOWFLAKE_KEY_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e28cb61ad084ea0e — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:184 
                with open(jwt_token) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #8eb27076587d4a99 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:276 
        api_response = requests.post(
            **self._make_completion_payload(prompt, formatted, **kwargs), stream=True
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #0fd791f8faeea851 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:297 
            api_response = await session.post(
                **self._make_completion_payload(prompt, formatted, **kwargs)
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #eda10863ed379962 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:321 
        api_response = requests.post(
            **self._make_completion_payload(prompt, formatted, **kwargs), stream=True
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #348af0ba1db4df21 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:349 
                api_response = await session.post(
                    **self._make_completion_payload(prompt, formatted, **kwargs)
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c7abb25887c1d428 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:365 
                api_response = await session.post(
                    **self._make_completion_payload(prompt, formatted, **kwargs)
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #966da7bc8ac62e0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:430 
        api_response = requests.post(
            **self._make_chat_payload(messages, **kwargs), stream=True
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b0d3e69ab2f39d0a — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:456 
            api_response = await session.post(
                **self._make_chat_payload(messages, **kwargs)
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #51bb67b8464b1d18 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:484 
        api_response = requests.post(
            **self._make_chat_payload(messages, **kwargs), stream=True
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8bddf52a4510fa62 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:515 
            api_response = await session.post(
                **self._make_chat_payload(messages, **kwargs)
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #3b39a23547eb8854 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:22 
    with open(SPCS_TOKEN_PATH) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c527bfcf382b584 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:32 
        os.path.exists(SPCS_TOKEN_PATH) and os.environ.get("SNOWFLAKE_HOST") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae9cb0ce7489804e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:45 
    return os.getenv("SNOWFLAKE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c0495d88814ed539 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:61 
    with open(sf_private_key_filepath, "rb") as pem_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-databricks

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #666faeead1c419e7 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:36 
        api_key = api_key or os.environ.get("DATABRICKS_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77b42e1c37326a57 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:37 
        api_base = api_base or os.environ.get("DATABRICKS_SERVING_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-deepinfra

python first-party
expand_more 7 low-confidence finding(s)
low egress production #fdcb7a4c72642a31 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/base.py:184 
        result = self._client.request(INFERENCE_ENDPOINT, payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3ef1b7bcdfe17ebc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/base.py:225 
        result = self._client.request(CHAT_API_ENDPOINT, payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3ce603e4582aa7fa — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/client.py:47 
            response = requests.post(
                self.get_url(endpoint),
                json={
                    **payload,
                    "stream": False,
                },
                headers=self._get_headers(),
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e32620a2c5897aa5 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/client.py:77 
            response = requests.post(
                self.get_url(endpoint),
                json={
                    **payload,
                    "stream": True,
                },
                headers=self._get_headers(),
                stream=True,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #17b9d2f8f15e34ed — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/client.py:111 
                async with session.post(
                    self.get_url(endpoint),
                    json={
                        **payload,
                        "stream": False,
                    },
                    headers=self._get_headers(),
                    timeout=self.timeout,
                ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #cfa71bd4f86b06cc — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/client.py:142 
                async with session.post(
                    self.get_url(endpoint),
                    json={
                        **payload,
                        "stream": True,
                    },
                    headers=self._get_headers(),
                    timeout=self.timeout,
                ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #016f555ba428543e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-deepinfra/llama_index/llms/deepinfra/client.py:176 
        return requests.get(request_url, headers=self._get_headers())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-deepseek

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5680e25ee5176bcc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-deepseek/llama_index/llms/deepseek/base.py:36 
        api_key = api_key or os.environ.get("DEEPSEEK_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-featherlessai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #e75c902ba2dcb07a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-featherlessai/llama_index/llms/featherlessai/base.py:37 
        api_key = api_key or os.environ.get("FEATHERLESS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-gaudi

python first-party
expand_more 10 low-confidence finding(s)
low env_fs test-only Excluded from app score #95fbaa6ad17305a4 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/examples/basic.py:301 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #318df07a65d7e2b6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:98 
    args.local_rank = int(os.getenv("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5cf2c6f0d02f3319 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:99 
    args.world_size = int(os.getenv("WORLD_SIZE", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c7720734dc53334 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:100 
    args.global_rank = int(os.getenv("RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dd6515f28b8d6a50 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:113 
        const_marking = os.getenv("ENABLE_CONST_MARKING", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e1dd4098d96e8ad — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:135 
    os.environ.setdefault("EXPERIMENTAL_WEIGHT_SHARING", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ee950a33fed37d7 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:138 
        os.environ.setdefault("GRAPH_VISUALIZATION", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1035af59ea1358e2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:142 
        os.environ.setdefault("PT_HPU_LAZY_ACC_PAR_MODE", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00adaf479cb21372 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:143 
        os.environ.setdefault("PT_HPU_ENABLE_LAZY_COLLECTIVES", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f279ba712987bfc0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:153 
        os.environ.setdefault("PT_HPUGRAPH_DISABLE_TENSOR_CACHE", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-google-genai

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #abd5066f8f9a9aeb — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:199 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #af4e4ab9ad507ac2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:202 
            or os.getenv("GOOGLE_GENAI_USE_VERTEXAI", "false") != "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ce95f58dcd5f508 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b58e20a00e9b57d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-groq

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #c170c82dffe35b45 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-groq/llama_index/llms/groq/base.py:37 
        api_key = api_key or os.environ.get("GROQ_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-huggingface

python first-party
expand_more 2 low-confidence finding(s)
low egress production #a2625403b51ace20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-huggingface/llama_index/llms/huggingface/utils.py:11 
    model_info = dict(requests.get(url).json())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b8430b52a50b2016 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-huggingface/llama_index/llms/huggingface/utils.py:21 
    model_info = dict(requests.get(url).json())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-ibm

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #f033582e55bf8fe8 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:38 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef87d53230705831 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:39 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b2656a398c1120d1 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:49 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #08a6a2ee7622db34 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:60 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14889afadb78a9cc — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:62 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7630734de21aac6a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:64 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #28d1b373ac15fb90 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:74 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f2e3532e6bafbe8 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:79 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5837ce8120c14bca — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:88 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-keywordsai

python first-party
expand_more 2 low-confidence finding(s)
low egress production #69bfe06da02c8ed4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:50 
        response = requests.get("https://api.keywordsai.co/api/models/public")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #305a96ff6e2f1860 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:166 
    openai_api_key = api_key or os.environ.get("KEYWORDSAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-llama-cpp

python first-party
expand_more 2 low-confidence finding(s)
low egress production #b665c886077d7f85 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-llama-cpp/llama_index/llms/llama_cpp/base.py:231 
            with requests.get(model_url, stream=True) as r:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #001f2b8b87bbd11a — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-llama-cpp/llama_index/llms/llama_cpp/base.py:232 
                with open(model_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-meta

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #d57cbef2729d7972 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-meta/llama_index/llms/meta/base.py:42 
        api_key = api_key or os.environ.get("LLAMA_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-minimax

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #89a50c47ca478ed2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-minimax/llama_index/llms/minimax/base.py:43 
        api_key = api_key or os.environ.get("MINIMAX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-modelslab

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #da9826d474d41d27 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-modelslab/llama_index/llms/modelslab/base.py:68 
        api_key = api_key or os.environ.get("MODELSLAB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-monsterapi

python first-party
expand_more 1 low-confidence finding(s)
low egress production #5fb708bdf2e59be9 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-monsterapi/llama_index/llms/monsterapi/base.py:136 
        response = requests.get(f"{api_base}/models/info", headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-nebius

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #fae30f057cdba13f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nebius/llama_index/llms/nebius/base.py:42 
        api_key = api_key or os.environ.get("NEBIUS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-netmind

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f700296b040b90e6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-netmind/llama_index/llms/netmind/base.py:39 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a8e17a2acf8590c9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia/llama_index/llms/nvidia/base.py:52 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #c3d05e21173e593f — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:182 
                with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #865c521fa28d1f72 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:245 
                with open(serialize_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-oci-data-science

python first-party
expand_more 2 low-confidence finding(s)
low egress production #098c301b17349375 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-oci-data-science/llama_index/llms/oci_data_science/client.py:427 
            response = self._client.post(
                url,
                headers=self._prepare_headers(stream=False, headers=headers),
                auth=self.auth,
                json=payload,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b9095f3a255a20d0 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-oci-data-science/llama_index/llms/oci_data_science/client.py:649 
            response = await self._client.post(
                url,
                headers=self._prepare_headers(stream=False, headers=headers),
                auth=self.auth,
                json=payload,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-oci-genai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #2c4faa17f28dc983 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-oci-genai/llama_index/llms/oci_genai/utils.py:141 
                with open(oci_config.get("security_token_file"), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-openai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #65acebe0fc173194 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-openai/llama_index/llms/openai/utils.py:1039 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-ovhcloud

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #450382c7d903f42a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ovhcloud/llama_index/llms/ovhcloud/base.py:109 
            api_key = os.environ.get("OVHCLOUD_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-paieas

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #da447bbe6c31329e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:24 
        api_key = api_key or os.environ.get("PAIEAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4bd8a3c0634a9084 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:25 
        api_base = api_base or os.environ.get("PAIEAS_API_BASE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-palm

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #e450e7ab50eb3a95 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-palm/llama_index/llms/palm/base.py:86 
        api_key = api_key or os.environ.get("PALM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-perplexity

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #8b1b28d84f0a8190 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:118 
        api_key = api_key or getenv("PPLX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #54bd6cf0ed939657 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:199 
        response = requests.post(
            url, json=payload, headers=self.headers, timeout=self.timeout
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f3df0f52de69c71e — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:226 
        response = requests.post(
            url, json=payload, headers=self.headers, timeout=self.timeout
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #c2c2b2f293e70d4c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:256 
            response = await client.post(
                url, json=payload, headers=self.headers, timeout=self.timeout
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9edf41be19a40851 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:287 
            response = await client.post(
                url, json=payload, headers=self.headers, timeout=self.timeout
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f9bacdad3a9ab360 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:321 
            response = requests.post(
                url,
                json=payload,
                headers=self.headers,
                stream=True,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #4e6324038e0c0c2f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:377 
                response = await session.post(
                    url, json=payload, headers=self.headers, timeout=self.timeout
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #166b3b6a72f6bdfe — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:427 
            response = requests.post(
                url,
                json=payload,
                headers=self.headers,
                stream=True,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #86f155d9f0afe05b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:483 
                response = await session.post(
                    url, json=payload, headers=self.headers, timeout=self.timeout
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-pipeshift

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #e0e1729dbc8c23b3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-pipeshift/llama_index/llms/pipeshift/base.py:64 
        api_key = api_key or os.environ.get("PIPESHIFT_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-predibase

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #7c8f3b349e01c655 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:121 
            else os.environ.get("PREDIBASE_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d7bb5ae1e56f9bb — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:166 
            os.environ["PREDIBASE_GATEWAY"] = "https://api.app.predibase.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-qianfan

python first-party
expand_more 1 low-confidence finding(s)
low egress production #182d39236e3e6595 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-qianfan/llama_index/llms/qianfan/base.py:300 
        resp_dict = self._client.post(self.endpoint_url, json=request.dict())

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-reka

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #db209c3eefb27dfa — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-reka/llama_index/llms/reka/base.py:117 
        api_key = api_key or os.getenv("REKA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-replicate

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5081f9f44c97790b — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-replicate/llama_index/llms/replicate/base.py:97 
                base_kwargs["image"] = open(self.image, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-rungpt

python first-party
expand_more 4 low-confidence finding(s)
low egress production #b7bb8c6fd245735c — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-rungpt/llama_index/llms/rungpt/base.py:131 
        response_gpt = requests.post(
            self.base_url + "/generate",
            json=self._request_pack("complete", prompt, **kwargs),
            stream=False,
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #3700649f748c5424 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-rungpt/llama_index/llms/rungpt/base.py:154 
        response_gpt = requests.post(
            self.base_url + "/generate_stream",
            json=self._request_pack("complete", prompt, **kwargs),
            stream=True,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b9f379db083c6a9f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-rungpt/llama_index/llms/rungpt/base.py:195 
        response_gpt = requests.post(
            self.base_url + "/chat",
            json=self._request_pack("chat", message_list, **kwargs),
            stream=False,
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #b1a0905ce22b2e46 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-rungpt/llama_index/llms/rungpt/base.py:215 
        response_gpt = requests.post(
            self.base_url + "/chat_stream",
            json=self._request_pack("chat", message_list, **kwargs),
            stream=True,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-sambanovasystems

python first-party
expand_more 7 low-confidence finding(s)
low egress production #7c54bb7e21c87442 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:255 
        response = http_session.post(
            self.sambanova_url,
            headers={
                "Authorization": f"Bearer {self.sambanova_api_key.get_secret_value()}",
                "Content-Type": "application/json",
            },
            json=data,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #7b22c9163145ab0b — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:302 
            async with session.post(
                self.sambanova_url,
                headers={
                    "Authorization": f"Bearer {self.sambanova_api_key.get_secret_value()}",
                    "Content-Type": "application/json",
                },
                json=data,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #9019952715d396ae — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:355 
        response = http_session.post(
            self.sambanova_url,
            headers={
                "Authorization": f"Bearer {self.sambanova_api_key.get_secret_value()}",
                "Content-Type": "application/json",
            },
            json=data,
            stream=True,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #10b7d6d9a61f0285 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:433 
            async with session.post(
                self.sambanova_url,
                headers={
                    "Authorization": f"Bearer {self.sambanova_api_key.get_secret_value()}",
                    "Content-Type": "application/json",
                },
                json=data,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #1de54f93c1703f20 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:1033 
            response = http_session.post(
                self.streaming_url, headers=headers, json=data, stream=True
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #e0a5b081197dd1b7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:1037 
            response = http_session.post(
                self.base_url, headers=headers, json=data, stream=False
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #04c17d16a36e470d — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sambanovasystems/llama_index/llms/sambanovasystems/base.py:1146 
            async with session.post(
                url,
                headers=headers,
                json=data,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-sglang

python first-party
expand_more 1 low-confidence finding(s)
low egress production #3cdf5ed4ec80c5c7 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-sglang/llama_index/llms/sglang/utils.py:46 
    return requests.post(
        api_url,
        headers=headers,
        json=sampling_params,
        stream=stream,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-siliconflow

python first-party
expand_more 4 low-confidence finding(s)
low egress production #1d4296d20ef66642 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-siliconflow/llama_index/llms/siliconflow/base.py:389 
            response = session.post(
                self.base_url,
                json=input_json,
                headers=self._headers,
                timeout=self.timeout,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #aac7a32aec33d249 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-siliconflow/llama_index/llms/siliconflow/base.py:425 
            async with session.post(
                self.base_url,
                json=input_json,
                headers=self._headers,
                timeout=self.timeout,
            ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #ffbd9d1c77b55dc6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-siliconflow/llama_index/llms/siliconflow/base.py:462 
                response = session.post(
                    self.base_url,
                    json=input_json,
                    headers=self._headers,
                    timeout=self.timeout,
                )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f1dc3995e0093f56 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-siliconflow/llama_index/llms/siliconflow/base.py:513 
                async with session.post(
                    self.base_url,
                    json=input_json,
                    headers=self._headers,
                    timeout=self.timeout,
                ) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-together

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #3c68dce5af2126b9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-together/llama_index/llms/together/base.py:39 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-vllm

python first-party
expand_more 2 low-confidence finding(s)
low egress production #ce082f1a4577e440 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-vllm/llama_index/llms/vllm/utils.py:24 
    response = requests.post(
        api_url,
        headers=base_headers,
        json=sampling_params,
        stream=stream,
        timeout=timeout,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #40a0ae48f604aff8 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-vllm/llama_index/llms/vllm/utils.py:56 
    response = requests.post(
        api_url, headers=base_headers, json=payload, stream=stream, timeout=timeout
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/llms/llama-index-llms-yi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #ba05f7981bc4e6e4 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-yi/llama_index/llms/yi/base.py:90 
        api_key = api_key or os.environ.get("YI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-you

python first-party
expand_more 3 low-confidence finding(s)
low egress production #7a76dc83bf3dc028 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:25 
    response = requests.post(base_url, headers=headers, json=kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #592161f9563de838 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:35 
    response = requests.post(base_url, headers=headers, stream=True, json=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e3de9ba1e3124341 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:125 
        return self.ydc_api_key or os.environ["YDC_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a87b6c405075c31c — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank/llama_index/postprocessor/aimon_rerank/base.py:41 
            api_key = api_key or os.environ["AIMON_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #926c5bc371bd3793 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank/llama_index/postprocessor/contextual_rerank/base.py:45 
            api_key = api_key or os.environ["CONTEXTUAL_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #395f23e47441049c — Environment-variable access.
repo/llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb/llama_index/storage/kvstore/dynamodb/base.py:87 
        dynamodb_url = os.getenv("DYNAMODB_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

⚠ Higher-risk dependencies not analyzed

These higher-risk dependencies were not analyzed in this scan — treat the verdict as provisional. This is a scan-coverage limitation, not a detected data leak.

  • httpx http — scan budget exceeded
  • requests http — scan budget exceeded
  • aiohttp http — scan budget exceeded
  • azure-cosmos cloud — scan budget exceeded
  • azure-identity cloud — scan budget exceeded
  • azure-data-tables cloud — scan budget exceeded
  • google-cloud-firestore cloud — scan budget exceeded
  • google-cloud-aiplatform cloud — scan budget exceeded
  • anthropic ai — scan budget exceeded
  • azure-ai-inference cloud — scan budget exceeded
  • cohere ai — scan budget exceeded
  • opentelemetry-sdk analytics — scan budget exceeded
  • opentelemetry-api analytics — scan budget exceeded
  • opentelemetry-semantic-conventions analytics — scan budget exceeded
  • google-cloud-discoveryengine cloud — scan budget exceeded

Skipped dependencies

Production

  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-openvino-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-rankgpt-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-jinaai-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-tei-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-rankllm-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-colbert-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-ibm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-siliconflow-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-flashrank-rerank prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-docling prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-slide prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-topic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-chonkie prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-vectara prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-colbert prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-lancedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-postgresml prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-llama-cloud prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-bge-m3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/indices/llama-index-indices-managed-vertexai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/graph_rag/llama-index-graph-rag-cognee prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-tldw prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-videodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-bedrock prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-you prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-vectorize prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-vertexai-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-superlinked prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-galaxia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-duckdb-retriever prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-kendra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-pathway prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-alletra-x10000 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-bm25 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-honeyhive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-langfuse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-uptrain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-literalai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-argilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-promptlayer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-wandb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-opik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-agentops prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-aim prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-openinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-airweave prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-exa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yahoo-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-text-to-image prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-bing-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jina prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-zapier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brightdata prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-python-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-cv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-moss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playgrounds prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vector-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yelp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openapi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-dappier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brave-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-translate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp-discovery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-linkup-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-artifact-editor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-multion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-tavily-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-serpex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-measurespace prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-seltz prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-parallel-web-systems prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-requests prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wolfram-alpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-waii prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-ionic-shopping prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-arxiv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-neo4j prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-valyu prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cogniswitch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-agentql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-speech prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-signnow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-typecast prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vectara-query prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playwright prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira-issue prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-desearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-duckduckgo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-metaphor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-hive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/evaluation/llama-index-evaluation-tonic-validate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/response_synthesizers/llama-index-response-synthesizers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-guidance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-evaporate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-lmformatenforcer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-gemini-live prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-entity prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-relik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-marvin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/selectors/llama-index-selectors-notdiamond prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-google-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-sagemaker-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-isaacus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-text-embeddings-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-langchain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llamafile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-bedrock prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cohere prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mistralai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-anyscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-deepinfra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alephalpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-textembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ipex-llm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vllm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-openvino prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clarifai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openvino-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai-like prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-opea prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llm-rails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-modelscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-together prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-siliconflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gaudi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gigachat prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fastembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cloudflare-workersai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nomic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fireworks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nebius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ollama prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nvidia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ibm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-zhipuai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-litellm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-jinaai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum-intel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-voyageai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-instructor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-adapter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-heroku prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-baseten prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-api prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-data-science prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-autoembeddings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-netmind prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-xinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai/llama_index/embeddings/premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-clickhouse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-openGauss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lindorm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pgvecto-rs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-singlestoredb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tair prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-analyticdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-kdbai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-yugabytedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oceanbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awsdocdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tablestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-redis prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-relyt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-ApertureDB prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vespa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lantern prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurepostgresql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neo4jvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-gel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-mysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vectorx prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tencentvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-baiduvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azureaisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hologres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosnosql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neptune prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pinecone prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-db2 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-objectbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bigquery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-supabase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-duckdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-nile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-postgres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-docarray prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tidbvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dynamodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-epsilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-typesense prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-timescalevector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-upstash prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mariadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-agentmesh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-azure prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-arango-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azstorage-blob prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-singlestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hatena-blog prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kaltura prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-steamship prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangadex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-linear prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-smart-pdf-loader prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-minio prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-macrometa-gdn prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-patentsview prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bilibili prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordpress prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-readwise prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangoapps-guides prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-discord prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-onedrive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-guru prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-apify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-trello prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-psychic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opendal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feishu-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-athena prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-maps prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-iceberg prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-sec-filings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docstring-walker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docugami prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whisper prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-snowflake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-nougat-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-asana prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-rayyan prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-genius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-screenpipe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-toggl prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-boarddocs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-memos prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-cdk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-document360 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-service-now prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-openalex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-metal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-confluence prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-string-iterable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-obsidian prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-datasets prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-llama-parse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-github prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gcs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-youtube-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitbook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docling prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-twitter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-quip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stackoverflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-typeform prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azcognitive-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-semanticscholar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whatsapp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-myscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-marker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-spotify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-assemblyai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-telegram prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote-depth prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oxylabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stripe-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zyte-serp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kibela prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pathway prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-layoutir prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pandas-ai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitlab prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-huggingface-fs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-paddle-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-imdb-review prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-intercom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-make-com prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-legacy-office prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firebase-realtimedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feedly-rss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-zendesk-support prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-web prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-gong prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zendesk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-markitdown prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-json prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-agent-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gpt-repo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dad-jokes prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mondaydotcom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-reddit prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hwp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-structured-data prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-preprocess prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bitbucket prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-earnings-call-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-joplin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pebblo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zulip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphdb-cypher prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-lilac prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airtable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-papers prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-table prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-stripe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-uniprot prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-azure prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-qianfan prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-oracleai prod — scan budget exceeded
  • first-party (python): docs/api_reference prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/storage/subcat/pkg2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/vector_stores/pkg1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-utils/util prod — scan budget exceeded
  • httpx prod — scan budget exceeded
  • requests prod — scan budget exceeded
  • aiohttp prod — scan budget exceeded
  • azure-cosmos prod — scan budget exceeded
  • azure-identity prod — scan budget exceeded
  • azure-data-tables prod — scan budget exceeded
  • google-cloud-firestore prod — scan budget exceeded
  • google-cloud-aiplatform prod — scan budget exceeded
  • anthropic prod — scan budget exceeded
  • azure-ai-inference prod — scan budget exceeded
  • cohere prod — scan budget exceeded
  • opentelemetry-sdk prod — scan budget exceeded
  • opentelemetry-api prod — scan budget exceeded
  • opentelemetry-semantic-conventions prod — scan budget exceeded
  • google-cloud-discoveryengine prod — scan budget exceeded
  • llama-index-core prod — scan budget exceeded
  • llama-index-embeddings-openai prod — scan budget exceeded
  • llama-index-llms-openai prod — scan budget exceeded
  • nltk prod — scan budget exceeded
  • SQLAlchemy prod — scan budget exceeded
  • dataclasses-json prod — scan budget exceeded
  • deprecated prod — scan budget exceeded
  • fsspec prod — scan budget exceeded
  • nest-asyncio prod — scan budget exceeded
  • numpy prod — scan budget exceeded
  • tenacity prod — scan budget exceeded
  • tiktoken prod — scan budget exceeded
  • typing-extensions prod — scan budget exceeded
  • typing-inspect prod — scan budget exceeded
  • networkx prod — scan budget exceeded
  • dirtyjson prod — scan budget exceeded
  • tqdm prod — scan budget exceeded
  • pillow prod — scan budget exceeded
  • PyYAML prod — scan budget exceeded
  • wrapt prod — scan budget exceeded
  • pydantic prod — scan budget exceeded
  • filetype prod — scan budget exceeded
  • eval-type-backport prod — scan budget exceeded
  • banks prod — scan budget exceeded
  • aiosqlite prod — scan budget exceeded
  • llama-index-workflows prod — scan budget exceeded
  • setuptools prod — scan budget exceeded
  • platformdirs prod — scan budget exceeded
  • tinytag prod — scan budget exceeded
  • click prod — scan budget exceeded
  • packaging prod — scan budget exceeded
  • rich prod — scan budget exceeded
  • nebula3-python prod — scan budget exceeded
  • tidb-vector prod — scan budget exceeded
  • PyMySQL prod — scan budget exceeded
  • falkordb prod — scan budget exceeded
  • neo4j prod — scan budget exceeded
  • aperturedb prod — scan budget exceeded
  • ray prod — scan budget exceeded
  • llama-index-storage-kvstore-dynamodb prod — scan budget exceeded
  • llama-index-storage-kvstore-tablestore prod — scan budget exceeded
  • llama-index-storage-kvstore-mongodb prod — scan budget exceeded
  • llama-index-storage-kvstore-elasticsearch prod — scan budget exceeded
  • llama-index-storage-kvstore-duckdb prod — scan budget exceeded
  • llama-index-kvstore-couchbase prod — scan budget exceeded
  • llama-index-storage-kvstore-azure prod — scan budget exceeded
  • llama-index-storage-kv-store-azurecosmosnosql prod — scan budget exceeded
  • llama-index-storage-kvstore-firestore prod — scan budget exceeded
  • llama-index-storage-kvstore-redis prod — scan budget exceeded
  • llama-index-storage-kvstore-postgres prod — scan budget exceeded
  • llama-index-storage-kvstore-gel prod — scan budget exceeded
  • redis prod — scan budget exceeded
  • llama-index-utils-azure prod — scan budget exceeded
  • upstash_redis prod — scan budget exceeded
  • opensearch-py prod — scan budget exceeded
  • pymongo prod — scan budget exceeded
  • gel prod — scan budget exceeded
  • jinja2 prod — scan budget exceeded
  • psycopg2-yugabytedb prod — scan budget exceeded
  • sqlalchemy-yugabytedb prod — scan budget exceeded
  • aioboto3 prod — scan budget exceeded
  • boto3-stubs prod — scan budget exceeded
  • asyncpg prod — scan budget exceeded
  • psycopg prod — scan budget exceeded
  • tablestore prod — scan budget exceeded
  • duckdb prod — scan budget exceeded
  • llama-index-vector-stores-duckdb prod — scan budget exceeded
  • pyarrow prod — scan budget exceeded
  • elasticsearch prod — scan budget exceeded
  • couchbase prod — scan budget exceeded
  • psycopg2-binary prod — scan budget exceeded
  • ag-ui-protocol prod — scan budget exceeded
  • fastapi prod — scan budget exceeded
  • guidance prod — scan budget exceeded
  • llama-index-program-guidance prod — scan budget exceeded
  • mem0ai prod — scan budget exceeded
  • guardrails-ai prod — scan budget exceeded
  • llama-index-llms-openai-like prod — scan budget exceeded
  • transformers prod — scan budget exceeded
  • modelscope prod — scan budget exceeded
  • torch prod — scan budget exceeded
  • sentencepiece prod — scan budget exceeded
  • ms-swift prod — scan budget exceeded
  • pip prod — scan budget exceeded
  • octoai prod — scan budget exceeded
  • gigachat prod — scan budget exceeded
  • litellm prod — scan budget exceeded
  • mistralai prod — scan budget exceeded
  • pyjwt prod — scan budget exceeded
  • cryptography prod — scan budget exceeded
  • ibm-watsonx-ai prod — scan budget exceeded
  • reka-api prod — scan budget exceeded
  • mlx-lm prod — scan budget exceeded
  • mlx prod — scan budget exceeded
  • llama-index-llms-llama-cpp prod — scan budget exceeded
  • langchain prod — scan budget exceeded
  • llama-index-llms-huggingface prod — scan budget exceeded
  • optimum prod — scan budget exceeded
  • aleph-alpha-client prod — scan budget exceeded
  • ai21 prod — scan budget exceeded
  • llama-index-llms-anthropic prod — scan budget exceeded
  • portkey-ai prod — scan budget exceeded
  • portkey prod — scan budget exceeded
  • openvino-genai prod — scan budget exceeded
  • huggingface-hub prod — scan budget exceeded
  • dashscope prod — scan budget exceeded
  • oci prod — scan budget exceeded
  • google-genai prod — scan budget exceeded
  • premai prod — scan budget exceeded
  • google-generativeai prod — scan budget exceeded
  • sseclient-py prod — scan budget exceeded
  • cleanlab-tlm prod — scan budget exceeded
  • llama-index-utils-qianfan prod — scan budget exceeded
  • llama-cpp-python prod — scan budget exceeded
  • friendli-client prod — scan budget exceeded
  • ipex-llm prod — scan budget exceeded
  • bigdl-core-xe-21 prod — scan budget exceeded
  • bigdl-core-xe-addons-21 prod — scan budget exceeded
  • bigdl-core-xe-batch-21 prod — scan budget exceeded
  • dpcpp-cpp-rt prod — scan budget exceeded
  • intel_extension_for_pytorch prod — scan budget exceeded
  • mkl-dpcpp prod — scan budget exceeded
  • onednn prod — scan budget exceeded
  • torchvision prod — scan budget exceeded
  • clarifai prod — scan budget exceeded
  • contextual-client prod — scan budget exceeded
  • python-dotenv prod — scan budget exceeded
  • ollama prod — scan budget exceeded
  • tokenizers prod — scan budget exceeded
  • llama-index-readers-upstage prod — scan budget exceeded
  • alibabacloud-searchplat20240529 prod — scan budget exceeded
  • tritonclient prod — scan budget exceeded
  • konko prod — scan budget exceeded
  • zhipuai prod — scan budget exceeded
  • sniffio prod — scan budget exceeded
  • termcolor prod — scan budget exceeded
  • llama-index-instrumentation prod — scan budget exceeded
  • fastembed prod — scan budget exceeded
  • voyageai prod — scan budget exceeded
  • llmlingua prod — scan budget exceeded
  • aimon prod — scan budget exceeded
  • colpali-engine prod — scan budget exceeded
  • presidio-analyzer prod — scan budget exceeded
  • presidio-anonymizer prod — scan budget exceeded
  • rank-llm prod — scan budget exceeded
  • mixedbread prod — scan budget exceeded
  • pinecone prod — scan budget exceeded
  • flashrank prod — scan budget exceeded
  • docling-core prod — scan budget exceeded
  • chonkie prod — scan budget exceeded
  • llama-index-vector-stores-google prod — scan budget exceeded
  • llama-index-response-synthesizers-google prod — scan budget exceeded
  • lancedb prod — scan budget exceeded
  • pylance prod — scan budget exceeded
  • tantivy prod — scan budget exceeded
  • polars prod — scan budget exceeded
  • open-clip-torch prod — scan budget exceeded
  • llama-index-embeddings-dashscope prod — scan budget exceeded
  • llama-index-readers-dashscope prod — scan budget exceeded
  • llama-index-node-parser-dashscope prod — scan budget exceeded
  • pgml prod — scan budget exceeded
  • peft prod — scan budget exceeded
  • flagembedding prod — scan budget exceeded
  • cognee prod — scan budget exceeded
  • graphistry prod — scan budget exceeded
  • videodb prod — scan budget exceeded
  • vectorize-client prod — scan budget exceeded
  • google-auth-httplib2 prod — scan budget exceeded
  • google-auth-oauthlib prod — scan budget exceeded
  • superlinked prod — scan budget exceeded
  • pydi-client prod — scan budget exceeded
  • bm25s prod — scan budget exceeded
  • pystemmer prod — scan budget exceeded
  • honeyhive prod — scan budget exceeded
  • openinference-instrumentation-llama-index prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • uptrain prod — scan budget exceeded
  • argilla prod — scan budget exceeded
  • argilla-llama-index prod — scan budget exceeded
  • promptlayer prod — scan budget exceeded
  • wandb prod — scan budget exceeded
  • agentops prod — scan budget exceeded
  • aim prod — scan budget exceeded
  • jwt prod — scan budget exceeded
  • airweave-sdk prod — scan budget exceeded