Close Open Privacy Scan

link https://github.com/infiniflow/ragflow
bolt Snapshot: commit 20f866e
science engine v1.21
schedule 2026-07-19T10:15:49.207644+00:00

help Not analyzed — coverage too low to judge

Too little of this repository was analyzed to judge — 191/335 dependencies were scanned. This is not a clean result; it means the scan could not run far enough to reach one.

smart_toy MCP server detected: anthropic, cohere, langgraph, litellm +2 more — detected in dependencies, not a safety judgment.

App Privacy Score

— /100
Not analyzed — coverage too low

Coverage too low to score · 107 finding(s)

bar_chart Score Breakdown

egress −10
env_fs −3

list Scan Summary

0 high 0 medium 107 low
First-party packages: 1
Dependency packages: 0
Ecosystem: go

swap_horiz Application data flows

Not enough of this repository was analyzed to look for application data flows. Absence of findings here is not evidence of a clean result.

</> First-Party Code

first-party (python)

go first-party
expand_more 107 low-confidence finding(s)
low env_fs production #31f99994733272e7 — Environment-variable access.
repo/internal/agent/component/io/pdf_writer.go:170 
	if explicit := strings.TrimSpace(os.Getenv("RAGFLOW_PDF_FONT_PATH")); explicit != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0199bb33534a616b — Environment-variable access.
repo/internal/agent/component/io/pdf_writer.go:179 
	if explicit := strings.TrimSpace(os.Getenv(envKey)); explicit != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f22378aeced38680 — Filesystem access.
repo/internal/agent/component/io/pdf_writer.go:325 
	return os.ReadFile(tmpName)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8f9d2fcc466ebecf — Filesystem access.
repo/internal/agent/sandbox/local.go:174 
	if err := os.WriteFile(probe, []byte("ok"), 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbbf7aab68fa64f4 — Filesystem access.
repo/internal/agent/sandbox/local.go:274 
		if err := os.WriteFile(scriptPath, []byte(BuildPythonWrapper(code, argsJSON)), 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3525cbf46aafc139 — Filesystem access.
repo/internal/agent/sandbox/local.go:281 
		if err := os.WriteFile(scriptPath, []byte(BuildJavaScriptWrapper(code, argsJSON)), 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db24d189eb5a231b — Filesystem access.
repo/internal/agent/sandbox/local.go:440 
	if err := os.WriteFile(probe, []byte("ok"), 0o600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33c8767ff0cc1044 — Filesystem access.
repo/internal/agent/sandbox/local.go:537 
		body, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87a1807fd76f94f1 — Filesystem access.
repo/internal/agent/sandbox/ssh.go:177 
		if b, err := os.ReadFile(keyPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7ddf0ba4ebaf304 — Filesystem access.
repo/internal/cli/cli.go:239 
		data, err := os.ReadFile(configFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #16aa3d2c69240c20 — Filesystem access.
repo/internal/cli/cli.go:382 
	data, err := os.ReadFile("rf.yml")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #80df6ee823bbf434 — Filesystem access.
repo/internal/cli/cli.go:401 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9dacc2b83ad0290 — Filesystem access.
repo/internal/cli/cli.go:690 
	if f, err := os.Open(histFile); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c858b6ee16063ed7 — Filesystem access.
repo/internal/cli/cli.go:697 
		if f, err := os.Create(histFile); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b4ff2bd4d9811937 — Filesystem access.
repo/internal/cli/cli.go:921 
	publicKeyPEM, err := os.ReadFile(*publicKeyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8350a3eb44ae81ba — Filesystem access.
repo/internal/cli/filesystem/skill.go:1591 
			content, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b560a197164c6527 — Filesystem access.
repo/internal/cli/filesystem/skill_hub/source/local.go:59 
	content, err := os.ReadFile(skillMdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4977b19006af9c57 — Filesystem access.
repo/internal/cli/filesystem/skill_hub/source/local.go:115 
		data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #966e9c8758e92ce5 — Filesystem access.
repo/internal/cli/filesystem/skill_hub/source/local.go:147 
	content, err := os.ReadFile(skillMdPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #951914912001e578 — Filesystem access.
repo/internal/cli/filesystem/skill_install.go:288 
		if err := os.WriteFile(filePath, content, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77935b240c459094 — Filesystem access.
repo/internal/cli/user_command.go:2042 
				imageContent, err := os.ReadFile(image)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4b76cc8b7fe459fc — Filesystem access.
repo/internal/cli/user_command.go:2084 
		audioContent, err := os.ReadFile(audioFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #221813c05775105f — Filesystem access.
repo/internal/cli/user_command.go:2560 
	if err := os.WriteFile(localPath, audioBytes, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a70452243764bcda — Filesystem access.
repo/internal/cli/user_command.go:2586 
			if err := os.WriteFile(finalPath, audioBytes, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e42e062f636b399c — Filesystem access.
repo/internal/cli/user_command.go:2765 
		fileContent, err = os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #083294967f89e897 — Filesystem access.
repo/internal/cli/user_command.go:2854 
			fileContent, err = os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5651508bafe0ca07 — Filesystem access.
repo/internal/cli/user_command.go:3556 
	fileContent, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c478668874e749f — Filesystem access.
repo/internal/cli/user_command.go:3778 
	optionsRaw, err := os.ReadFile(optionsFilename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bba4b8ffdf01729e — Filesystem access.
repo/internal/cli/user_command.go:3799 
		fileToChunking, err := os.ReadFile(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c2836144007792d — Environment-variable access.
repo/internal/common/environments.go:25 
	return os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6803ddcfec8db027 — Filesystem access.
repo/internal/common/password.go:202 
	keyData, err := os.ReadFile("conf/private.pem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b2901ecb90a065d — Filesystem access.
repo/internal/common/version.go:55 
		if data, err = os.ReadFile(versionPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab0297f392f1ad1b — Filesystem access.
repo/internal/dao/canvas_template_seed.go:96 
		raw, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1dde03962701783a — Filesystem access.
repo/internal/dao/canvas_template_seed.go:146 
		raw, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cf5e126c487ddf6 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/char_adapter.go:23 
	data, err := os.ReadFile(jsonPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88b30b343740f410 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:86 
		if goTxt, err := os.ReadFile(goTextPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cbe8e82247522841 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:87 
			if pyTxt, err := os.ReadFile(pyTextPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a0790158ab36db74 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:207 
	f, err := os.Create(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77c3d8ab4f1ac89e — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:380 
		goData, _ := os.ReadFile(goPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e570fa8403edaa64 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:388 
		pyData, _ := os.ReadFile(pyPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f009d9e7c2096acb — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:517 
		goData, _ := os.ReadFile(filepath.Join(goDLADir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f43f51c155240ad4 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:518 
		pyData, _ := os.ReadFile(filepath.Join(pyDLADir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9f2002200dbfdd60 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:588 
		goData, _ := os.ReadFile(filepath.Join(goTSRDir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9394f762c4dd20b8 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/compare.go:589 
		pyData, _ := os.ReadFile(filepath.Join(pyTSRDir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ac0e032971bcf3ca — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/metadata.go:22 
		data, err := os.ReadFile(filepath.Join(pyTextDir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #528e94500c633dd4 — Filesystem access.
repo/internal/deepdoc/parser/pdf/tool/metadata.go:61 
		data, err := os.ReadFile(filepath.Join(goTextDir, e.Name()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #84b4257ba7510848 — Filesystem access.
repo/internal/deepdoc/parser/pdf/util/garbled.go:224 
		data, err := os.ReadFile(filepath.Join(utility.GetProjectRoot(), "rag", "res", "deepdoc", "ocr.res"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c498c2e03cb07de0 — Filesystem access.
repo/internal/engine/elasticsearch/chunk.go:2406 
		data, err = os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00104ab29513728b — Filesystem access.
repo/internal/engine/elasticsearch/client.go:155 
	data, err := os.ReadFile(*mappingPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #561710f4f36a353b — Filesystem access.
repo/internal/engine/infinity/chunk.go:75 
	schemaData, err := os.ReadFile(*fpMapping)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d63260d70959e116 — Filesystem access.
repo/internal/engine/infinity/metadata.go:62 
	schemaData, err := os.ReadFile(*fpMapping)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #096df8525d8af98f — Filesystem access.
repo/internal/engine/infinity/sql.go:67 
	data, err := os.ReadFile(*filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2f4cbd6e80dffdc1 — Filesystem access.
repo/internal/entity/models/302ai.go:567 
	audioFile, err := os.Open(strings.TrimSpace(*file))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d925c6a7d525a6fb — Filesystem access.
repo/internal/entity/models/cohere.go:532 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #67c7476f15c2165b — Filesystem access.
repo/internal/entity/models/cometapi.go:564 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43e0ee2bc7db6e04 — Filesystem access.
repo/internal/entity/models/deepinfra.go:542 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a735e6fbedbbefdf — Filesystem access.
repo/internal/entity/models/fishaudio.go:95 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #254c97d261f71ce0 — Filesystem access.
repo/internal/entity/models/groq.go:379 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eca26f883bdbc2f6 — Filesystem access.
repo/internal/entity/models/model.go:262 
		data, err = os.ReadFile(filePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e8ac6b9028808e3 — Filesystem access.
repo/internal/entity/models/model.go:307 
	data, err = os.ReadFile(filepath.Join(findRepoRoot(), "conf", "all_models.json"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2df12966470aec45 — Filesystem access.
repo/internal/entity/models/openai.go:836 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce240d189ec3a2a1 — Filesystem access.
repo/internal/entity/models/openrouter.go:561 
	audio, err := os.ReadFile(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a44ad73f5505038c — Filesystem access.
repo/internal/entity/models/ragcon.go:610 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dfe1e894ede9d119 — Filesystem access.
repo/internal/entity/models/siliconflow.go:742 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #502d2cae3def904d — Filesystem access.
repo/internal/entity/models/togetherai.go:544 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a690da28c10738c3 — Filesystem access.
repo/internal/entity/models/xai.go:481 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ead63940c3ee4f23 — Filesystem access.
repo/internal/entity/models/xiaomi.go:573 
	audio, err := os.ReadFile(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b7dbefe20a4ce384 — Filesystem access.
repo/internal/entity/models/xinference.go:565 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0053011b4383793a — Filesystem access.
repo/internal/entity/models/zhipu-ai.go:729 
	audioFile, err := os.Open(*file)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #842a6ad7499b3ac0 — Filesystem access.
repo/internal/handler/tenant.go:358 
	data, err := os.ReadFile(req.FilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d9bbc4408ceb9af — Filesystem access.
repo/internal/handler/tenant.go:436 
	data, err := os.ReadFile(req.FilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #599079eec0cb788d — Filesystem access.
repo/internal/harness/core/evals/evals.go:346 
		data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7c5705a50f962b57 — Filesystem access.
repo/internal/harness/core/evals/evals.go:361 
		data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #2e29605f2db720a7 — Filesystem access.
repo/internal/harness/core/evals/evals.go:505 
		data, _ := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #f9d3d5eeac5b3264 — Filesystem access.
repo/internal/harness/core/evals/evals.go:518 
	if err := os.WriteFile(filepath.Join(dir, "summary.json"), []byte(summary), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d4e776ea7435fe60 — Filesystem access.
repo/internal/harness/core/evals/evals.go:536 
	return os.WriteFile(filepath.Join(dir, "results.csv"), []byte(buf.String()), 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #550b110acff7e297 — Filesystem access.
repo/internal/harness/core/middlewares/skill/filesystem_backend.go:19 
	data, err := os.ReadFile(b.resolve(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #618a63c4464c637c — Filesystem access.
repo/internal/harness/core/prebuilt/coding/coding.go:190 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2002f1ae1d610993 — Filesystem access.
repo/internal/harness/core/prebuilt/coding/coding.go:198 
	return os.WriteFile(path, []byte(content), 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8f6337ba2170729 — Filesystem access.
repo/internal/harness/core/prebuilt/coding/coding.go:202 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d96ad7b40a29a8e2 — Filesystem access.
repo/internal/harness/core/prebuilt/coding/coding.go:211 
	return os.WriteFile(path, []byte(content), 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd52dfeb8e356471 — Filesystem access.
repo/internal/harness/core/prompt_builder.go:105 
		content, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #97754de74d83a47e — Filesystem access.
repo/internal/harness/core/prompt_builder.go:118 
				content, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c8261acef8ba979 — Filesystem access.
repo/internal/harness/core/prompt_builder.go:202 
	data, err := os.ReadFile(filepath.Join(root, ".git", "HEAD"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23b7b229f153fe0b — Filesystem access.
repo/internal/harness/events/localfile.go:98 
	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc0ceff8fa900e21 — Filesystem access.
repo/internal/harness/events/localfile.go:154 
	f, err := os.OpenFile(fpath, os.O_APPEND|os.O_CREATE|os.O_WRONLY, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc26d153585b8883 — Filesystem access.
repo/internal/ingestion/component/docx_vision_dispatch.go:247 
	content, err := os.ReadFile(promptPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a20de19a3519f71a — Filesystem access.
repo/internal/ingestion/component/pdf_vision_dispatch.go:497 
	content, err := os.ReadFile(promptPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #202a215de01a25d9 — Environment-variable access.
repo/internal/ingestion/component/tokenizer.go:118 
	if v := os.Getenv("COMPONENT_EXEC_TIMEOUT_TOKENIZER"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a80d8c053d3aa753 — Filesystem access.
repo/internal/ingestion/task/tool/compare_pipeline_golden.go:257 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98faf79ce4803a03 — Filesystem access.
repo/internal/ingestion/task/tool/compare_pipeline_golden.go:267 
	data, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #272df7c4266567cd — Environment-variable access.
repo/internal/parser/parser/xls_tcadp.go:22 
		baseURL = strings.TrimSpace(os.Getenv("TCADP_APISERVER"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3048dd0d3036f14 — Environment-variable access.
repo/internal/parser/parser/xls_tcadp.go:29 
		apiKey = strings.TrimSpace(os.Getenv("TCADP_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #fa5540206bb41aa2 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/internal/service/chat_pipeline.go:1779 
	req, err := http.NewRequestWithContext(ctx, http.MethodPost, tavilyURL, bytes.NewReader(bodyBytes))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #f89448f0b1616149 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/internal/service/connector.go:1198 
	req, err := http.NewRequestWithContext(ctx, http.MethodPost, boxOAuthTokenURL, strings.NewReader(form.Encode()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d9359f2d28deba91 — Filesystem access.
repo/internal/service/load_prompt.go:81 
	content, err := os.ReadFile(promptPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d327e5912a39a207 — Filesystem access.
repo/internal/service/metadata_filter.go:111 
		content, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07e37184dcf20fed — Environment-variable access.
repo/internal/service/model_service.go:1409 
		value := os.Getenv(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f92893c938f0f2b — Filesystem access.
repo/internal/service/nlp/synonym.go:80 
	if data, err := os.ReadFile(path); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91e5e88b9f4f2a31 — Filesystem access.
repo/internal/service/nlp/term_weight.go:60 
	if data, err := os.ReadFile(nerPath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce8f063ec85b2644 — Filesystem access.
repo/internal/service/nlp/term_weight.go:94 
	data, err := os.ReadFile(fnm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a6c6ca286a38a606 — Filesystem access.
repo/internal/service/nlp/wordnet.go:145 
		file, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a8d0e8caecf3109 — Filesystem access.
repo/internal/service/nlp/wordnet.go:172 
		file, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37389fe4071c6eb8 — Filesystem access.
repo/internal/service/nlp/wordnet.go:333 
	file, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b632bb1765e6dd7 — Filesystem access.
repo/tools/migrate-canvas/main.go:96 
	raw, err := os.ReadFile(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2e80a19b30c51874 — Filesystem access.
repo/tools/migrate-canvas/main.go:112 
		if err := os.WriteFile(goldenPath, out, 0o644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5868ef8d243bf5a0 — Filesystem access.
repo/tools/migrate-canvas/main.go:120 
		golden, gErr := os.ReadFile(goldenPath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

  • @xyflow/react prod — dist-only: no readable source
  • pptx-preview prod — dist-only: no readable source
  • react-pdf-highlighter prod — dist-only: no readable source
  • sonner prod — dist-only: no readable source
  • dashscope prod — no sdist (wheels only)
  • infinity-sdk prod — sdist exceeds byte cap
  • onnxruntime prod — no sdist (wheels only)
  • onnxruntime-gpu prod — no sdist (wheels only)
  • opencv-python prod — sdist exceeds byte cap
  • opencv-python-headless prod — sdist exceeds byte cap
  • pyodbc prod — scan budget exceeded
  • pypandoc prod — scan budget exceeded
  • pypdf prod — scan budget exceeded
  • python-calamine prod — scan budget exceeded
  • python-docx prod — scan budget exceeded
  • paramiko prod — scan budget exceeded
  • python-pptx prod — scan budget exceeded
  • qianfan prod — scan budget exceeded
  • quart-auth prod — scan budget exceeded
  • quart-cors prod — scan budget exceeded
  • ranx prod — scan budget exceeded
  • readability-lxml prod — scan budget exceeded
  • replicate prod — scan budget exceeded
  • reportlab prod — scan budget exceeded
  • roman-numbers prod — scan budget exceeded
  • ruamel-base prod — scan budget exceeded
  • ruamel-yaml prod — scan budget exceeded
  • scholarly prod — scan budget exceeded
  • selenium-wire prod — scan budget exceeded
  • spacy prod — scan budget exceeded
  • en-core-web-sm prod — scan budget exceeded
  • slack-sdk prod — scan budget exceeded
  • socksio prod — scan budget exceeded
  • agentrun-sdk prod — scan budget exceeded
  • nest-asyncio prod — scan budget exceeded
  • sqlglotrs prod — scan budget exceeded
  • tavily-python prod — scan budget exceeded
  • tencentcloud-sdk-python prod — scan budget exceeded
  • tika prod — scan budget exceeded
  • valkey prod — scan budget exceeded
  • volcengine prod — scan budget exceeded
  • voyageai prod — scan budget exceeded
  • webdav4 prod — scan budget exceeded
  • webdriver-manager prod — scan budget exceeded
  • wikipedia prod — scan budget exceeded
  • word2number prod — scan budget exceeded
  • xgboost prod — scan budget exceeded
  • setuptools prod — scan budget exceeded
  • xpinyin prod — scan budget exceeded
  • yfinance prod — scan budget exceeded
  • zhipuai prod — scan budget exceeded
  • peewee prod — scan budget exceeded
  • langgraph prod — scan budget exceeded
  • litellm prod — scan budget exceeded
  • pyairtable prod — scan budget exceeded
  • pygithub prod — scan budget exceeded
  • asana prod — scan budget exceeded
  • python-gitlab prod — scan budget exceeded
  • alibabacloud-dingtalk prod — scan budget exceeded
  • quart-schema prod — scan budget exceeded
  • lark-oapi prod — scan budget exceeded
  • discord.py prod — scan budget exceeded
  • python-telegram-bot prod — scan budget exceeded
  • line-bot-sdk prod — scan budget exceeded
  • wechatpy prod — scan budget exceeded
  • litserve prod — scan budget exceeded
  • numpy prod — scan budget exceeded
  • python-multipart prod — scan budget exceeded
  • shapely prod — scan budget exceeded
  • six prod — scan budget exceeded
  • elasticsearch prod — scan budget exceeded
  • pymysql prod — scan budget exceeded
  • sqlalchemy prod — scan budget exceeded
  • click prod — scan budget exceeded
  • tqdm prod — scan budget exceeded
  • rich prod — scan budget exceeded
  • lark prod — scan budget exceeded
  • fastapi prod — scan budget exceeded
  • pydantic prod — scan budget exceeded
  • slowapi prod — scan budget exceeded
  • uvicorn prod — scan budget exceeded
  • cloud.google.com/go/storage prod — scan budget exceeded
  • github.com/ClickHouse/clickhouse-go/v2 prod — scan budget exceeded
  • github.com/DATA-DOG/go-sqlmock prod — scan budget exceeded
  • github.com/alibabacloud-go/agentrun-20250910/v5 prod — scan budget exceeded
  • github.com/alibabacloud-go/darabonba-openapi/v2 prod — scan budget exceeded
  • github.com/alicebob/miniredis/v2 prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2 prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2/config prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2/credentials prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2/service/s3 prod — scan budget exceeded
  • github.com/aws/aws-sdk-go-v2/service/sts prod — scan budget exceeded
  • github.com/aws/smithy-go prod — scan budget exceeded
  • github.com/browserbase/stagehand-go/v3 prod — scan budget exceeded
  • github.com/cenkalti/backoff/v5 prod — scan budget exceeded
  • github.com/cespare/xxhash/v2 prod — scan budget exceeded
  • github.com/cloudwego/eino prod — scan budget exceeded
  • github.com/denisenkom/go-mssqldb prod — scan budget exceeded
  • github.com/elastic/go-elasticsearch/v8 prod — scan budget exceeded
  • github.com/eric642/e2b-go-sdk prod — scan budget exceeded
  • github.com/gin-gonic/gin prod — scan budget exceeded
  • github.com/glebarez/sqlite prod — scan budget exceeded
  • github.com/go-sql-driver/mysql prod — scan budget exceeded
  • github.com/goccy/go-json prod — scan budget exceeded
  • github.com/golang-jwt/jwt/v5 prod — scan budget exceeded
  • github.com/gomarkdown/markdown prod — scan budget exceeded
  • github.com/google/uuid prod — scan budget exceeded
  • github.com/infiniflow/infinity-go-sdk prod — scan budget exceeded
  • github.com/iromli/go-itsdangerous prod — scan budget exceeded
  • github.com/json-iterator/go prod — scan budget exceeded
  • github.com/kaptinlin/jsonrepair prod — scan budget exceeded
  • github.com/ledongthuc/pdf prod — scan budget exceeded
  • github.com/lib/pq prod — scan budget exceeded
  • github.com/minio/minio-go/v7 prod — scan budget exceeded
  • github.com/nats-io/nats-server/v2 prod — scan budget exceeded
  • github.com/nats-io/nats.go prod — scan budget exceeded
  • github.com/nikolalohinski/gonja prod — scan budget exceeded
  • github.com/peterh/liner prod — scan budget exceeded
  • github.com/pkoukk/tiktoken-go prod — scan budget exceeded
  • github.com/redis/go-redis/v9 prod — scan budget exceeded
  • github.com/signintech/gopdf prod — scan budget exceeded
  • github.com/siongui/gojianfan prod — scan budget exceeded
  • github.com/spf13/viper prod — scan budget exceeded
  • github.com/xuri/excelize/v2 prod — scan budget exceeded
  • github.com/yfedoseev/office_oxide/go prod — scan budget exceeded
  • github.com/yfedoseev/pdf_oxide/go prod — scan budget exceeded
  • github.com/zeebo/xxh3 prod — scan budget exceeded
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp prod — scan budget exceeded
  • go.opentelemetry.io/otel prod — scan budget exceeded
  • go.opentelemetry.io/otel/sdk prod — scan budget exceeded
  • go.opentelemetry.io/otel/trace prod — scan budget exceeded
  • go.uber.org/zap prod — scan budget exceeded
  • golang.org/x/crypto prod — scan budget exceeded
  • golang.org/x/net prod — scan budget exceeded
  • golang.org/x/sync prod — scan budget exceeded
  • golang.org/x/term prod — scan budget exceeded
  • golang.org/x/text prod — scan budget exceeded
  • google.golang.org/api prod — scan budget exceeded
  • google.golang.org/genai prod — scan budget exceeded
  • gopkg.in/natefinch/lumberjack.v2 prod — scan budget exceeded
  • gopkg.in/yaml.v3 prod — scan budget exceeded
  • gorm.io/driver/mysql prod — scan budget exceeded
  • gorm.io/gorm prod — scan budget exceeded