Close Open Privacy Scan

bolt Snapshot: commit 7ceee28
science engine v1.23
schedule 2026-07-28T01:08:37.930198+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

smart_toy MCP server detected: mcp — detected in dependencies, not a safety judgment.

App Privacy Score

82 /100
Low privacy risk

Low risk · 109 finding(s)

Based on: 1 first-party package(s) · 6/6 deps analyzed

Dependency score: 82 (Low risk)

bar_chart Score Breakdown

egress −15
env_fs −3

list Scan Summary

0 high 0 medium 109 low
First-party packages: 1
Dependency packages: 6
Ecosystem: python

swap_horiz External domains

::ffff:192.168.0.1api.coingecko.comapi.marketaux.combackend.userland.comblogs.law.harvard.edubrotlipy.readthedocs.iocointelegraph.comcreativecommons.orgcyber.law.harvard.edudatatracker.ietf.orgdeveloper.mozilla.orgdocs.python.orgfc.yahoo.comfeeds.content.dowjones.iofinance.yahoo.comfreshmeat.netgithub.comhacks.benhammersley.comhttpbin.orgipinfo.iomadskills.commedia.tangent.orgmodelcontextprotocol.iomy.netscape.commy.theinfo.orgmüller.deother.compastebin.compodlove.orgpostneo.comprismstandard.orgpurl.orgpypi.python.orgpython-tradingview-ta.readthedocs.ioquery1.finance.yahoo.comquery2.finance.yahoo.comreddit.comrequests.readthedocs.iorssnamespace.orgs3-symbol-logo.tradingview.comscanner.tradingview.comschemas.pocketsoap.comschemas.xmlsoap.orgsearch.cnbc.comsearch.yahoo.comstackoverflow.comsymbol-search.tradingview.comtools.ietf.orgtradingview.brianthe.devweb.resource.orgwebns.netwellformedweb.orgwww.coindesk.comwww.georss.orgwww.itunes.comwww.opengis.netwww.python.orgwww.reddit.comwww.rfc-editor.orgwww.tradingview.comwww.w3.orgxmlns.comxn--fiqs8s.icom.museum

</> First-Party Code

first-party (python)

python first-party
expand_more 43 low-confidence finding(s)
low egress Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 15 locations
low env_fs Filesystem access. 2 locations
low env_fs Environment-variable access. 24 locations
low egress Hardcoded external endpoint. Review what data is sent to this destination. 2 locations

</> Dependencies

feedparser

python dependency

mcp

python dependency
expand_more 39 low-confidence finding(s)
low env_fs Environment-variable access. 16 locations
low egress Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 6 locations
low env_fs Filesystem access. 15 locations
low egress Hardcoded external endpoint. Review what data is sent to this destination. 2 locations

tradingview-screener

python dependency
expand_more 1 low-confidence finding(s)
low egress dependency Excluded from app score #26e89c877ab95d04 capability detected · no path traced Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination.
pkgs/python/[email protected]/src/tradingview_screener/query.py:594
        r = requests.post(self.url, json=self.query, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

tradingview-ta

python dependency
expand_more 4 low-confidence finding(s)
low env_fs dependency Excluded from app score #a1e5b0595dd451b9 capability detected · no path traced Filesystem access.
pkgs/python/[email protected]/setup.py:3
with open("README.md", "r") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #c388f4369bd8b824 capability detected · no path traced Hardcoded external endpoint. Review what data is sent to this destination.
pkgs/python/[email protected]/tradingview_ta/main.py:107
        req = requests.post(
            "https://symbol-search.tradingview.com/symbol_search", params={"text": text, "type": type})

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress Outbound request to a variable or assembled URL on a network client. Review what data is sent to this destination. 2 locations