Close Open Privacy Scan

bolt Snapshot: commit f51340e
science engine v1.23
schedule 2026-07-28T00:13:38.460953+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: fastmcp, mcp — detected in dependencies, not a safety judgment.

App Privacy Score

97 /100
Low privacy risk

Low risk · 114 finding(s)

Based on: 1 first-party package(s) · 3/4 deps analyzed

Dependency score: 72 (Medium risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 1 medium 113 low
First-party packages: 1
Dependency packages: 3
Ecosystem: python

swap_horiz External domains

blogs.msdn.comchimera.labs.oreilly.comclick.palletsprojects.comcode.activestate.comdatatracker.ietf.orgdocs.python.orgewbi.blogs.comfoss.heptapod.netgithub.commodelcontextprotocol.iomsdn.microsoft.comopenpyxl.readthedocs.iopurl.orgschemas.microsoft.comschemas.openxmlformats.orgstartbigthinksmall.wordpress.comtyper.tiangolo.comwww.python.orgwww.w3.org

</> First-Party Code

first-party (python)

python first-party
expand_more 4 low-confidence finding(s)

</> Dependencies

typer

python dependency
medium telemetry dependency Excluded from app score #37f74eeded75d3a3 capability detected · no path traced Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
pkgs/python/[email protected]/docs_src/progressbar/tutorial001_py310.py:12
    for value in track(range(100), description="Processing..."):

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 66 low-confidence finding(s)
low env_fs Filesystem access. 37 locations
low env_fs Environment-variable access. 29 locations

mcp

python dependency
expand_more 39 low-confidence finding(s)
low env_fs Environment-variable access. 16 locations
low egress Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs Filesystem access. 15 locations
low egress Hardcoded external endpoint. Review what data is sent to this destination. 2 locations

openpyxl

python dependency

Skipped dependencies

Production

  • fastmcp prod — sdist exceeds byte cap