Close Open Privacy Scan
App Privacy Score
Low risk · 334 finding(s)
Based on: 1 first-party package(s) · 10/12 deps analyzed
Dependency score: 62 (Medium risk)
bar_chart Score Breakdown
list Scan Summary
swap_horiz External domains
198.0.0.1android.googlesource.comapi.github.comarchive.ubuntu.comarstechnica.comattacker.comblog.famzah.netblog.quarkslab.comblogs.oracle.combootlin.combugs.python.orgburpcollaborator.netchromedevtools.github.iochromedriver.storage.googleapis.comcode.activestate.comcrbug.comcrsrc.orgdebuginfod.debian.netdebuginfod.elfutils.orgdebuginfod.ubuntu.comdev.w3.orgdocs.aiohttp.orgdocs.angr.iodocs.google.comdocs.oracle.comdocs.pwntools.comdocs.python.orgdrafts.csswg.orgen.wikipedia.orgfacelessuser.github.iofedidcg.github.ioflask.palletsprojects.comgit.kernel.orggithub.comgitlab.comgoo.glegooglechromelabs.github.iohtml.spec.whatwg.orghttpbin.orghttpbingo.orgimg.website.comjulianor.tripod.comlaunchpad.netlearn.microsoft.comlibc.riplinuxdevcenter.commail.python.orgman.openbsd.orgman7.orgmanpages.ubuntu.commsdn.microsoft.commsedgedriver.microsoft.comnvd.nist.govpcsclite.apdu.frpeps.python.orgpip.pypa.iopypi.orgpython.orgrce.corefspecs.linuxbase.orgrefspecs.linuxfoundation.orgrequests.readthedocs.ioreveng.sourceforge.ioreverseengineering.stackexchange.comridiculousfish.comrpyc.readthedocs.ioserverfault.comservices.nvd.nist.govsource.chromium.orgsourceware.orgstackoverflow.comstorage.googleapis.comtarget.comtechpatterns.comtools.ietf.orgusers.ece.cmu.eduvincentdary.github.iow3c-fedid.github.iow3c.github.ioweb.devwicg.github.iowww.chromium.orgwww.crummy.comwww.freebsd.orgwww.gnu.orgwww.google.co.inwww.mozilla.orgwww.python.orgwww.rfc-editor.orgwww.sciencedirect.comwww.sco.comwww.selenium.devwww.systutorials.comwww.user-agents.orgwww.w3.orgzsh.sourceforge.io
</> First-Party Code
first-party (python)
python first-partyexpand_more 31 low-confidence finding(s)
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 13 locations
low env_fs — Environment-variable access. 3 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 4 locations
low env_fs — Filesystem access. 11 locations
</> Dependencies
angr
python dependency from opentelemetry.trace import Status, StatusCode, Tracer, get_current_spanA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
from opentelemetry.trace import get_tracer as _get_tracerA telemetry/analytics SDK is used; event data is sent to a third-party collector.
Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 48 low-confidence finding(s)
low env_fs — Environment-variable access. 19 locations
low env_fs — Filesystem access. 28 locations
with urllib.request.urlopen(TARBALL_URL) as resp, tarfile.open(fileobj=resp, mode="r|gz") as tar:Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
aiohttp
python dependencyexpand_more 30 low-confidence finding(s)
low env_fs — Filesystem access. 10 locations
low env_fs — Environment-variable access. 9 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 5 locations
low egress — Hardcoded external endpoint. Review what data is sent to this destination. 6 locations
flask
python dependencyexpand_more 21 low-confidence finding(s)
low env_fs — Filesystem access. 9 locations
low env_fs — Environment-variable access. 12 locations
psutil
python dependencyexpand_more 28 low-confidence finding(s)
low env_fs — Filesystem access. 19 locations
low env_fs — Environment-variable access. 7 locations
res = requests.get(url, timeout=REQUEST_TIMEOUT)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
req = urlopen(URL, **kwargs)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
pwntools
python dependencyexpand_more 117 low-confidence finding(s)
low env_fs — Environment-variable access. 59 locations
low env_fs — Filesystem access. 54 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 3 locations
response = requests.get("https://pypi.org/simple/pwntools/",
headers={"Accept": "application/vnd.pypi.simple.v1+json"},
timeout=5)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
requests
python dependencyexpand_more 8 low-confidence finding(s)
low env_fs — Environment-variable access. 8 locations
selenium
python dependencyexpand_more 36 low-confidence finding(s)
low env_fs — Environment-variable access. 14 locations
low env_fs — Filesystem access. 15 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 7 locations
webdriver-manager
python dependencyexpand_more 13 low-confidence finding(s)
low env_fs — Environment-variable access. 7 locations
low egress — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations
low env_fs — Filesystem access. 3 locations
response = self._http_client.get(url)Data is sent to a hardcoded external endpoint; review what leaves the process.
Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
Skipped dependencies
Production
- fastmcp prod — sdist exceeds byte cap
- mitmproxy prod — no sdist (wheels only)