Close Open Privacy Scan

link https://github.com/neuml/txtai
bolt Snapshot: commit 2f11f93
science engine v1.5
schedule 2026-07-16T10:07:06.425881+00:00

verified_user No application data leak found

No high-confidence exfiltration was found in application code.

App Privacy Score

97 /100
Low privacy risk

Low risk · 74 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 0 medium 74 low
First-party packages: 1
Dependency packages: 0
Ecosystem: python

swap_horiz External domains

apiserverarxiv.orggithub.comwww.apache.org

</> First-Party Code

first-party (python)

python first-party
expand_more 74 low-confidence finding(s)
low env_fs test-only #f12e5ea26b8d544f — Environment-variable access.
repo/examples/article.py:62 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ec14463be8a1609d — Environment-variable access.
repo/examples/baseball.py:708 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #fd0098c8f07a906a — Filesystem access.
repo/examples/benchmarks.py:119 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #85ccc8d50272a9f6 — Filesystem access.
repo/examples/benchmarks.py:123 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c8bd1cc04477570c — Filesystem access.
repo/examples/benchmarks.py:138 
        with open(f"{self.path}/queries.jsonl", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a319c0f2fe6694c2 — Filesystem access.
repo/examples/benchmarks.py:173 
            with open(self.config, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #713fd6cc5161f2d9 — Filesystem access.
repo/examples/benchmarks.py:360 
            with open(output, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0c320f1409e3554f — Filesystem access.
repo/examples/benchmarks.py:372 
            with open(output, "wb") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f4ae942854c4eb8c — Filesystem access.
repo/examples/benchmarks.py:524 
    with open(f"{path}/qrels/test.tsv", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #4b30af556104aa67 — Filesystem access.
repo/examples/benchmarks.py:698 
    with open("benchmarks.json", mode, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #485b2c496b41aa47 — Filesystem access.
repo/examples/books.py:55 
        with open(os.path.join(self.path, "filtered.txt"), encoding="utf-8") as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #12fb0bc5b2bc4e09 — Environment-variable access.
repo/examples/books.py:175 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a45dc4a2007420a9 — Environment-variable access.
repo/examples/images.py:101 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #1b39a14d484c4447 — Environment-variable access.
repo/examples/similarity.py:69 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d5e4504b6fff863c — Environment-variable access.
repo/examples/wiki.py:69 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a8fd0399e36a2f1b — Filesystem access.
repo/examples/workflows.py:580 
        with open(workflow, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d952e8ea4ab8d6ad — Environment-variable access.
repo/examples/workflows.py:583 
        os.environ["CONFIG"] = workflow

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ce1a01dec4b108cf — Environment-variable access.
repo/examples/workflows.py:741 
    os.environ["TOKENIZERS_PARALLELISM"] = "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae3533ebd087c03c — Filesystem access.
repo/setup.py:6 
with open("README.md", "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6cc93328e33aa136 — Environment-variable access.
repo/setup.py:32 
if os.getenv("MINIMAL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7b34aa563a0a32ea — Filesystem access.
repo/src/python/txtai/agent/base.py:138 
            with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb8f35a2e0e2ce35 — Filesystem access.
repo/src/python/txtai/agent/tool/edit.py:49 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #040124799b561ca5 — Filesystem access.
repo/src/python/txtai/agent/tool/edit.py:55 
            with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69ede872501b125b — Filesystem access.
repo/src/python/txtai/agent/tool/grep.py:62 
                    with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #208600525c5296cc — Filesystem access.
repo/src/python/txtai/agent/tool/skill.py:69 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #179049ecd1d819e6 — Filesystem access.
repo/src/python/txtai/agent/tool/write.py:41 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #55e691971823ea4c — Environment-variable access.
repo/src/python/txtai/ann/dense/faiss.py:12 
    os.environ["OMP_NUM_THREADS"] = os.environ.get("OMP_NUM_THREADS", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1dd1b560cc394ff — Environment-variable access.
repo/src/python/txtai/ann/dense/faiss.py:15 
    os.environ["KMP_DUPLICATE_LIB_OK"] = os.environ.get("KMP_DUPLICATE_LIB_OK", "TRUE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91ebb9470b6c2375 — Filesystem access.
repo/src/python/txtai/ann/dense/numpy.py:97 
            with open(path, "wb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e533a8b8b8d14ef1 — Environment-variable access.
repo/src/python/txtai/ann/dense/pgvector.py:226 
        return self.setting("url", os.environ.get("ANN_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ecf0a336e36b2765 — Filesystem access.
repo/src/python/txtai/ann/sparse/ivfsparse.py:147 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bb5cbc93d86e0c7c — Filesystem access.
repo/src/python/txtai/ann/sparse/ivfsparse.py:177 
        with open(path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #168f44ba0cfb2143 — Environment-variable access.
repo/src/python/txtai/ann/sparse/pgsparse.py:42 
        return self.setting("url", os.environ.get("SCORING_URL", os.environ.get("ANN_URL")))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50fe5db399bc8bdb — Environment-variable access.
repo/src/python/txtai/api/application.py:40 
    token = os.environ.get("TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db340977e562b5c4 — Environment-variable access.
repo/src/python/txtai/api/application.py:45 
    deps = os.environ.get("DEPENDENCIES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4ab022e3cd1250b3 — Environment-variable access.
repo/src/python/txtai/api/application.py:87 
    config = Application.read(os.environ.get("CONFIG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3963d89ee8107716 — Environment-variable access.
repo/src/python/txtai/api/application.py:90 
    api = os.environ.get("API_CLASS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c01ae932a18fde95 — Environment-variable access.
repo/src/python/txtai/api/application.py:110 
    extensions = os.environ.get("EXTENSIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #51f5259ff137a007 — Environment-variable access.
repo/src/python/txtai/api/authorization.py:24 
        self.token = token if token else os.environ.get("TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e02f180f79562d62 — Filesystem access.
repo/src/python/txtai/app/base.py:42 
                with open(data, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #049dbdfc07b98fa4 — Filesystem access.
repo/src/python/txtai/cloud/hub.py:82 
        with open(path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e00d8f9d2fc4e1bb — Environment-variable access.
repo/src/python/txtai/cloud/storage.py:50 
            config.get("key", os.environ.get("ACCESS_KEY")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4acabedf45e068d — Environment-variable access.
repo/src/python/txtai/cloud/storage.py:51 
            config.get("secret", os.environ.get("ACCESS_SECRET")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d672693d14ee6cba — Filesystem access.
repo/src/python/txtai/cloud/storage.py:103 
            with open(f, "rb") as iterator:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #370934fd6c081897 — Environment-variable access.
repo/src/python/txtai/database/client.py:130 
        content = os.environ.get("CLIENT_URL") if content == "client" else content

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6676e2e77e67744 — Filesystem access.
repo/src/python/txtai/embeddings/index/configuration.py:37 
        with open(f"{path}/{name}", "r" if jsonconfig else "rb", encoding="utf-8" if jsonconfig else None) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d5640a8e462bf15 — Filesystem access.
repo/src/python/txtai/embeddings/index/configuration.py:65 
        with open(f"{path}/{name}", "w" if jsonconfig else "wb", encoding="utf-8" if jsonconfig else None) as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e1351a02dfeb9709 — Filesystem access.
repo/src/python/txtai/embeddings/index/documents.py:44 
        with open(self.documents.name, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d74cf46f7da951f — Environment-variable access.
repo/src/python/txtai/graph/rdbms.py:92 
        url = self.config.get("url", os.environ.get("GRAPH_URL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #903c55cc81014a4b — Environment-variable access.
repo/src/python/txtai/models/models.py:164 
        return os.environ.get("PYTORCH_MPS_DISABLE") != "1" and torch.backends.mps.is_available()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e6d0be3cdaf4a640 — Filesystem access.
repo/src/python/txtai/models/pooling/base.py:174 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #078ba71812c08372 — Filesystem access.
repo/src/python/txtai/models/pooling/factory.py:145 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5922b8adaa5f55ff — Filesystem access.
repo/src/python/txtai/pipeline/audio/texttospeech.py:256 
        with open(config, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #510ceadaa8287094 — Filesystem access.
repo/src/python/txtai/pipeline/audio/texttospeech.py:332 
        with open(voices, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a5e2b2efdceb2d52 — Filesystem access.
repo/src/python/txtai/pipeline/data/filetohtml.py:91 
        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c7484450d6b3476c — Environment-variable access.
repo/src/python/txtai/pipeline/data/filetohtml.py:115 
        path = os.environ.get("TIKA_JAVA", "java")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27b2731b332545d8 — Filesystem access.
repo/src/python/txtai/pipeline/data/filetohtml.py:120 
            _ = Popen(path, stdout=open(os.devnull, "w"), stderr=open(os.devnull, "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d893bf08a33b0a3 — Filesystem access.
repo/src/python/txtai/pipeline/data/textractor.py:145 
            with open(url, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2218b3be8307890d — Environment-variable access.
repo/src/python/txtai/pipeline/llm/llama.py:75 
        kwargs["n_gpu_layers"] = kwargs.get("n_gpu_layers", -1 if kwargs.get("gpu", os.environ.get("LLAMA_NO_METAL") != "1") else 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d3961c822e9ac786 — Filesystem access.
repo/src/python/txtai/pipeline/train/hfonnx.py:108 
            with open(temp, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1f8abb733b77a8c6 — Filesystem access.
repo/src/python/txtai/pipeline/train/hfonnx.py:118 
            with open(temp, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2aa67b8ab1f4756 — Environment-variable access.
repo/src/python/txtai/scoring/pgtext.py:134 
            self.engine = create_engine(self.config.get("url", os.environ.get("SCORING_URL")), poolclass=StaticPool, echo=False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed68c051efb365c9 — Filesystem access.
repo/src/python/txtai/serialize/base.py:22 
        with open(path, "rb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #051e74b2959291c5 — Filesystem access.
repo/src/python/txtai/serialize/base.py:34 
        with open(path, "wb") as handle:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f63468c4c4cd5dc5 — Environment-variable access.
repo/src/python/txtai/serialize/pickle.py:77 
        enablepickle = self.allowpickle or os.environ.get("ALLOW_PICKLE", "False") in ("True", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38457e318dd3f665 — Filesystem access.
repo/src/python/txtai/vectors/base.py:178 
            with open(stream, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7623c5e2d706dc98 — Filesystem access.
repo/src/python/txtai/vectors/base.py:279 
            return open(f"{checkpoint}/{vectorsid}", "wb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #932a385ae922b114 — Environment-variable access.
repo/src/python/txtai/vectors/dense/llama.py:63 
        modelargs["n_gpu_layers"] = modelargs.get("n_gpu_layers", -1 if self.config.get("gpu", os.environ.get("LLAMA_NO_METAL") != "1") else 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #24c6b4c66cc13021 — Filesystem access.
repo/src/python/txtai/vectors/dense/m2v.py:40 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #850bfc45d73e9904 — Filesystem access.
repo/src/python/txtai/vectors/dense/words.py:96 
                with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8eb6e59e0989f7a — Filesystem access.
repo/src/python/txtai/vectors/recovery.py:37 
            self.spool = open(self.path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #601b5e1c2667f607 — Filesystem access.
repo/src/python/txtai/vectors/sparse/base.py:53 
        with open(stream, "rb") as queue:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7c8490a3e2638968 — Environment-variable access.
repo/src/python/txtai/workflow/task/storage.py:93 
        key = self.key if self.key is not None else os.environ.get("ACCESS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fe642e5340405f79 — Environment-variable access.
repo/src/python/txtai/workflow/task/storage.py:94 
        secret = self.secret if self.secret is not None else os.environ.get("ACCESS_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.