Close Open Privacy Scan

link https://github.com/neuml/txtai
bolt Snapshot: commit 2f11f93
science engine v1.21
schedule 2026-07-19T13:06:08.048949+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

82 /100
Low privacy risk

Low risk · 83 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

egress −15
env_fs −3

list Scan Summary

0 high 0 medium 83 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz External domains

arxiv.orggithub.comwww.apache.org

</> First-Party Code

first-party (python)

python first-party
expand_more 83 low-confidence finding(s)
low env_fs test-only Excluded from app score #02c50a7ec5899800 — Environment-variable access.
repo/examples/article.py:62 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #5da7c8fa83883de5 — Environment-variable access.
repo/examples/baseball.py:708 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a2ae51a697e7ecb4 — Filesystem access.
repo/examples/benchmarks.py:119 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b6ed365a8af24b68 — Filesystem access.
repo/examples/benchmarks.py:123 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #99d52c4cf4518628 — Filesystem access.
repo/examples/benchmarks.py:138 
        with open(f"{self.path}/queries.jsonl", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #afa8753e0e20b015 — Filesystem access.
repo/examples/benchmarks.py:173 
            with open(self.config, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #9af500826414f258 — Filesystem access.
repo/examples/benchmarks.py:360 
            with open(output, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #0cb933978dcf9eb8 — Filesystem access.
repo/examples/benchmarks.py:372 
            with open(output, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #4e4fa3a77494c0ac — Filesystem access.
repo/examples/benchmarks.py:524 
    with open(f"{path}/qrels/test.tsv", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #b4d070bb00e3d577 — Filesystem access.
repo/examples/benchmarks.py:698 
    with open("benchmarks.json", mode, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #ed45f082299c672d — Filesystem access.
repo/examples/books.py:55 
        with open(os.path.join(self.path, "filtered.txt"), encoding="utf-8") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #a7012d4f72e9fe0c — Environment-variable access.
repo/examples/books.py:175 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #d17622ba95aae8ac — Environment-variable access.
repo/examples/images.py:101 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #7c39bc10b4b4c98e — Environment-variable access.
repo/examples/similarity.py:69 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress test-only Excluded from app score #aee1d887453c451f — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/wiki.py:44 
            data = requests.get(Application.SEARCH_TEMPLATE % query).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress test-only Excluded from app score #3725b1d529c45ec2 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/examples/wiki.py:47 
                content = requests.get(Application.CONTENT_TEMPLATE % page).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs test-only Excluded from app score #bc9c725279e3f431 — Environment-variable access.
repo/examples/wiki.py:69 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #77dc2ae5fc47f4bb — Filesystem access.
repo/examples/workflows.py:580 
        with open(workflow, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #1a028459807e67f7 — Environment-variable access.
repo/examples/workflows.py:583 
        os.environ["CONFIG"] = workflow

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only Excluded from app score #8f59c0f8bc6de70e — Environment-variable access.
repo/examples/workflows.py:741 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c6e9c192468a029 — Filesystem access.
repo/setup.py:6 
with open("README.md", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3a8c261a58f2d96f — Environment-variable access.
repo/setup.py:32 
if os.getenv("MINIMAL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c32d059e4d5e366f — Filesystem access.
repo/src/python/txtai/agent/base.py:138 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #604837d8d010cb41 — Filesystem access.
repo/src/python/txtai/agent/tool/edit.py:49 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #025f9069c8b9e13c — Filesystem access.
repo/src/python/txtai/agent/tool/edit.py:55 
            with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ce3f8895ee7b8067 — Filesystem access.
repo/src/python/txtai/agent/tool/grep.py:62 
                    with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ff02a2a3518dc45d — Filesystem access.
repo/src/python/txtai/agent/tool/skill.py:69 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0e63929e7c7d6f08 — Filesystem access.
repo/src/python/txtai/agent/tool/write.py:41 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #179b749947d2dcac — Environment-variable access.
repo/src/python/txtai/ann/dense/faiss.py:12 
    os.environ["OMP_NUM_THREADS"] = os.environ.get("OMP_NUM_THREADS", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0ef5e1afcbe5916d — Environment-variable access.
repo/src/python/txtai/ann/dense/faiss.py:15 
    os.environ["KMP_DUPLICATE_LIB_OK"] = os.environ.get("KMP_DUPLICATE_LIB_OK", "TRUE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ebf73f0f3a8260d6 — Filesystem access.
repo/src/python/txtai/ann/dense/numpy.py:97 
            with open(path, "wb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9e86285b5023301d — Environment-variable access.
repo/src/python/txtai/ann/dense/pgvector.py:226 
        return self.setting("url", os.environ.get("ANN_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee3bf1476cc8ec5f — Filesystem access.
repo/src/python/txtai/ann/sparse/ivfsparse.py:147 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8a55884491edd2f — Filesystem access.
repo/src/python/txtai/ann/sparse/ivfsparse.py:177 
        with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db61d0241f0bcef4 — Environment-variable access.
repo/src/python/txtai/ann/sparse/pgsparse.py:42 
        return self.setting("url", os.environ.get("SCORING_URL", os.environ.get("ANN_URL")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8484e0f8885de101 — Environment-variable access.
repo/src/python/txtai/api/application.py:40 
    token = os.environ.get("TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02a24e098797556f — Environment-variable access.
repo/src/python/txtai/api/application.py:45 
    deps = os.environ.get("DEPENDENCIES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8564113d0844bad7 — Environment-variable access.
repo/src/python/txtai/api/application.py:87 
    config = Application.read(os.environ.get("CONFIG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f1b6b4badb0cf5bf — Environment-variable access.
repo/src/python/txtai/api/application.py:90 
    api = os.environ.get("API_CLASS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a31246233d67f220 — Environment-variable access.
repo/src/python/txtai/api/application.py:110 
    extensions = os.environ.get("EXTENSIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #96ec1b4c0d9875db — Environment-variable access.
repo/src/python/txtai/api/authorization.py:24 
        self.token = token if token else os.environ.get("TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #32a688917cb66f06 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/api/cluster.py:278 
        async with session.get(url) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #820271d9440e3544 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/api/cluster.py:294 
        async with session.post(url, json=data) as resp:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #756161984647b125 — Filesystem access.
repo/src/python/txtai/app/base.py:42 
                with open(data, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #913a786e1a12622f — Filesystem access.
repo/src/python/txtai/cloud/hub.py:82 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b594f1147b20b6fd — Environment-variable access.
repo/src/python/txtai/cloud/storage.py:50 
            config.get("key", os.environ.get("ACCESS_KEY")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99c0466a50c399e0 — Environment-variable access.
repo/src/python/txtai/cloud/storage.py:51 
            config.get("secret", os.environ.get("ACCESS_SECRET")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48934106c7556e12 — Filesystem access.
repo/src/python/txtai/cloud/storage.py:103 
            with open(f, "rb") as iterator:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b1907ddfc876748 — Environment-variable access.
repo/src/python/txtai/database/client.py:130 
        content = os.environ.get("CLIENT_URL") if content == "client" else content

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #291ccd11f1ab72b3 — Filesystem access.
repo/src/python/txtai/embeddings/index/configuration.py:37 
        with open(f"{path}/{name}", "r" if jsonconfig else "rb", encoding="utf-8" if jsonconfig else None) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4d38ac8c97a5bf9f — Filesystem access.
repo/src/python/txtai/embeddings/index/configuration.py:65 
        with open(f"{path}/{name}", "w" if jsonconfig else "wb", encoding="utf-8" if jsonconfig else None) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bae2ee450f66b150 — Filesystem access.
repo/src/python/txtai/embeddings/index/documents.py:44 
        with open(self.documents.name, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c43f7a8b4ed7487b — Environment-variable access.
repo/src/python/txtai/graph/rdbms.py:92 
        url = self.config.get("url", os.environ.get("GRAPH_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #490be66f8a5e78b9 — Environment-variable access.
repo/src/python/txtai/models/models.py:164 
        return os.environ.get("PYTORCH_MPS_DISABLE") != "1" and torch.backends.mps.is_available()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #065c2ebd9d1a4a6a — Filesystem access.
repo/src/python/txtai/models/pooling/base.py:174 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ec4c1d9a7c5130be — Filesystem access.
repo/src/python/txtai/models/pooling/factory.py:145 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e64da632c0bf5b3 — Filesystem access.
repo/src/python/txtai/pipeline/audio/texttospeech.py:256 
        with open(config, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fcfe3599cf7c2a2 — Filesystem access.
repo/src/python/txtai/pipeline/audio/texttospeech.py:332 
        with open(voices, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c30a05c7901824ad — Filesystem access.
repo/src/python/txtai/pipeline/data/filetohtml.py:91 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f6201d89bf6f6fa4 — Environment-variable access.
repo/src/python/txtai/pipeline/data/filetohtml.py:115 
        path = os.environ.get("TIKA_JAVA", "java")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a83b84495fb63398 — Filesystem access.
repo/src/python/txtai/pipeline/data/filetohtml.py:120 
            _ = Popen(path, stdout=open(os.devnull, "w"), stderr=open(os.devnull, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #332da6146f89a35d — Filesystem access.
repo/src/python/txtai/pipeline/data/textractor.py:145 
            with open(url, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #dbc63907a56439a6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/pipeline/data/urlretrieve.py:78 
        with contextlib.closing(self.opener.open(Request(url, headers=self.headers), timeout=self.timeout)) as connection:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #01142c10a704c680 — Environment-variable access.
repo/src/python/txtai/pipeline/llm/llama.py:75 
        kwargs["n_gpu_layers"] = kwargs.get("n_gpu_layers", -1 if kwargs.get("gpu", os.environ.get("LLAMA_NO_METAL") != "1") else 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #912cad9aaa5dc853 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/pipeline/llm/opencode.py:69 
        self.session = httpx.post(f"{self.url}/session").json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #90308050c70b2632 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/pipeline/llm/opencode.py:84 
            response = httpx.post(f"{self.url}/session/{self.session['id']}/message", json=request, timeout=None).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bc357f0b4ba5505c — Filesystem access.
repo/src/python/txtai/pipeline/train/hfonnx.py:108 
            with open(temp, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2741e45a0c635160 — Filesystem access.
repo/src/python/txtai/pipeline/train/hfonnx.py:118 
            with open(temp, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d7ae3a1ea5657cb7 — Environment-variable access.
repo/src/python/txtai/scoring/pgtext.py:134 
            self.engine = create_engine(self.config.get("url", os.environ.get("SCORING_URL")), poolclass=StaticPool, echo=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8175855d028ce1d1 — Filesystem access.
repo/src/python/txtai/serialize/base.py:22 
        with open(path, "rb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb60309f6dc827f2 — Filesystem access.
repo/src/python/txtai/serialize/base.py:34 
        with open(path, "wb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c110863b47f75f7c — Environment-variable access.
repo/src/python/txtai/serialize/pickle.py:77 
        enablepickle = self.allowpickle or os.environ.get("ALLOW_PICKLE", "False") in ("True", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73f71bd27f9e0699 — Filesystem access.
repo/src/python/txtai/vectors/base.py:178 
            with open(stream, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8498c4f1e4b16791 — Filesystem access.
repo/src/python/txtai/vectors/base.py:279 
            return open(f"{checkpoint}/{vectorsid}", "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #02281243dfe24283 — Environment-variable access.
repo/src/python/txtai/vectors/dense/llama.py:63 
        modelargs["n_gpu_layers"] = modelargs.get("n_gpu_layers", -1 if self.config.get("gpu", os.environ.get("LLAMA_NO_METAL") != "1") else 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01a813d438926da7 — Filesystem access.
repo/src/python/txtai/vectors/dense/m2v.py:40 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93168e5d4d1c8a46 — Filesystem access.
repo/src/python/txtai/vectors/dense/words.py:96 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b063e6c3266b976e — Filesystem access.
repo/src/python/txtai/vectors/recovery.py:37 
            self.spool = open(self.path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7d4891e314228fec — Filesystem access.
repo/src/python/txtai/vectors/sparse/base.py:53 
        with open(stream, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #c471dee4d5b76761 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/workflow/task/service.py:86 
            response = requests.get(self.url, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #8ee4ae85747c2dd6 — Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
repo/src/python/txtai/workflow/task/service.py:88 
            response = requests.post(self.url, json=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #cf8925433bae2532 — Environment-variable access.
repo/src/python/txtai/workflow/task/storage.py:93 
        key = self.key if self.key is not None else os.environ.get("ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #425ef7d31dd208a0 — Environment-variable access.
repo/src/python/txtai/workflow/task/storage.py:94 
        secret = self.secret if self.secret is not None else os.environ.get("ACCESS_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.