Close Open Privacy Scan

link https://github.com/run-llama/llama_index
bolt Snapshot: commit 67514f6
science engine v1.5
schedule 2026-07-14T09:28:44.315673+00:00

verified_user Application data leak confirmed

High-confidence data exfiltration identified in application code.

smart_toy MCP server detected: anthropic, chromadb, cohere, google-generativeai +9 more — detected in dependencies, not a safety judgment.
Incomplete scan — only 0/200 dependencies were analyzed. Treat the score as provisional.

App Privacy Score

0 /100
High privacy risk — application leak confirmed

High risk · 498 finding(s)

Dependency score: 100 (Low risk)

bar_chart Score Breakdown

pii_flow −60
telemetry −25
egress −15
env_fs −3

list Scan Summary

26 high 11 medium 461 low
First-party packages: 62
Dependency packages: 0
Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: accelerated-data-science.readthedocs.ioagent-search.readthedocs.ioai-gateway.helicone.aiai-gateway.vercel.shai.api.nvidia.comai.google.devaibadgr.comaip.baidubce.comairweave.aialg.liapiapi-anurag.eng.macrometa.ioapi-dev.vectorize.ioapi-staging.vectorize.ioapi.01.aiapi.agentql.comapi.aleph-alpha.comapi.anthropic.comapi.apertis.aiapi.app.predibase.comapi.asi1.aiapi.atlassian.comapi.bing.microsoft.comapi.brightdata.comapi.cerebras.aiapi.cloud.llamaindex.aiapi.cloudflare.comapi.cogniswitch.aiapi.cognitive.microsofttranslator.comapi.cometapi.comapi.contextual.aiapi.deepinfra.comapi.deepseek.comapi.docugami.comapi.elevenlabs.ioapi.endpoints.anyscale.comapi.featherless.aiapi.fireworks.aiapi.getguru.comapi.gitbook.comapi.github.comapi.groq.comapi.heroku.comapi.intercom.ioapi.isaacus.comapi.jina.aiapi.keywordsai.coapi.konko.aiapi.linear.appapi.llama.comapi.llmapi.comapi.llmrails.comapi.mangadex.orgapi.minimax.ioapi.mistral.aiapi.monday.comapi.netmind.aiapi.notion.comapi.novita.aiapi.olostep.comapi.openai.comapi.openalex.orgapi.parallel.aiapi.perplexity.aiapi.pipeshift.comapi.playgrounds.networkapi.polygon.ioapi.replicate.comapi.runllm.comapi.sambanova.aiapi.sarvam.aiapi.search.brave.comapi.serpex.devapi.siliconflow.cnapi.stackexchange.comapi.stackoverflowteams.comapi.stepfun.comapi.studio.nebius.aiapi.together.xyzapi.trytldw.aiapi.typecast.aiapi.upstage.aiapi.vectara.ioapi.vectorize.ioapi.x.aiapi.you.comapi.zenrows.comapihub.document360.ioapp.asana.comapp.getguru.comapp.hyperbrowser.aiapp.premai.ioapp.zenrows.comarxiv.orgastra.datastax.comatlassian-python-api.readthedocs.ioaws.amazon.combeta.api.smabbler.combrowserbase.comcdn.jsdelivr.netcdnapi-ev.kaltura.comchat-api.you.comchat.maritaca.aiclarifai.comcloud.baidu.comcloud.google.comcloud.llamaindex.aicloud.sambanova.aicognitiveservices.azure.comconfluence.atlassian.comconsole.llmrails.comdashboard.psychic.devdashscope.aliyuncs.comdashscope.oss-cn-beijing.aliyuncs.comdata.rcsb.orgdata.sec.govdemo.usememos.comdev.agentql.comdevcenter.heroku.comdeveloper.atlassian.comdeveloper.monsterapi.aideveloper.twitter.comdevelopers.cloudflare.comdevelopers.generativeai.googledevelopers.google.comdevelopers.llamaindex.aidevelopers.oxylabs.iodiscord.comdiscountingcashflows.comdocs.agentql.comdocs.aws.amazon.comdocs.claude.comdocs.firecrawl.devdocs.github.comdocs.helicone.aidocs.hyperbrowser.aidocs.igpt.aidocs.ioniccommerce.comdocs.litellm.aidocs.llamaindex.aidocs.modelslab.comdocs.mongodb.comdocs.neutrinoapp.comdocs.oracle.comdocs.perplexity.aidocs.predibase.comdocs.public.oneportal.content.oci.oraclecloud.comdocs.pydantic.devdocs.python-arango.comdocs.python.orgdocs.ray.iodocs.sambanova.aidocs.steamship.comdocs.sweep.devdocs.tonic.aidocs.vectara.comdocs.voyageai.comdocs.wandb.aidocs.you.comdocs.zyte.comdocumentation.you.comdownload.pytorch.orgdrive.google.comdynamicsessions.ioecc7deb6-26e0-419b-a7f2-0deb934af29a.monsterapi.aiefts.sec.goven.wikipedia.orgeutils.ncbi.nlm.nih.goveverlyai.xyzfastapi.mymagic.aifinance.yahoo.comfinnhub.iogateway.ai.cloudflare.comgenerativelanguagegenerativelanguage.googleapis.comgithub.comgitlab.comgo.boarddocs.comgoogleapis.devgpt-index.readthedocs.iograph.microsoft.comguides.mangoapps.comhelp.aliyun.comhelp.cleanlab.aihook.us1.make.comhostname.comhuggingface.coicanhazdadjoke.cominference.baseten.coinference.generativeai.us-chicago-1.oci.oraclecloud.comintegrate.api.nvidia.comjoplinapp.orglearn.microsoft.comllama.meta.comllm.api.cloud.yandex.netllm.monsterapi.ailocalai.iologin.microsoftonline.commintlify.s3.us-west-1.amazonaws.commodelslab.commy.telegram.orgmyapp.comneuml.github.ionewspaper.readthedocs.ionla.zapier.comnovita.aioai.endpoints.kepler.ai.cloud.ovh.netoctoai.cloudollama.comopen.bigmodel.cnopen.feishu.cnopen.larksuite.comopenrouter.aiopenweathermap.orgossrdbms-aad.database.windows.netovh.compandas.pydata.orgplaces.googleapis.complatform.claude.complatform.dappier.complatform.neutrinoapp.complatform.openai.complatform.parallel.aiplatform.quip.complatform.stepfun.complg.uwaterloo.capypi.nvidia.compypi.orgqdrant.github.iorayyan.aireadwise.iorealtime.oxylabs.iorealtime.oxyserps-dev.funrich.readthedocs.iorouter.neutrinoapp.comrsshub.apps.jina.ais3.amazonaws.comsandbox.oxylabs.iosarvam.aisc.lfeeder.comscrapfly.iosearch.patentsview.orgseekingalpha.comserpex.devsiliconflow.cnsmabbler.gitbook.iospider.cloudstackoverflow.comstatic.reuters.comsteamship.comstoragestripe.comsupport.intercom.comtaginfo.openstreetmap.orgtinyurl.comunpkg.comus-south.ml.cloud.ibm.comus.helicone.aivercel.comwidget.runllm.comwww.algolia.comwww.alphavantage.cowww.bbc.comwww.bing.comwww.ebi.ac.ukwww.elastic.cowww.engadget.comwww.google.comwww.googleapis.comwww.helicone.aiwww.imdb.comwww.konko.aiwww.llamaindex.aiwww.ncbi.nlm.nih.govwww.pennystockflow.comwww.reuters.comwww.sec.govwww.seltz.aiwww.sitemaps.orgwww.w3.orgwww.wolframalpha.comwww.zyte.comx.comyandex.comydc-index.ioyour-endpointyour-webhook.comyour-work-spaceyour_resource_name.openai.azure.comyoursite.atlassian.com

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:75 → repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:166 → repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128
high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81
high first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193
high first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204
high first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292
high first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126
high first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141
high first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91

</> First-Party Code

first-party (python)

python first-party
high pii_flow production #931ad41f52b88c3b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:114 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f39ab18f0a92fc14 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:131 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #03c474805a9c1a55 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-hatena-blog/llama_index/readers/hatena_blog/base.py:74 
        res = requests.get(url, auth=HTTPBasicAuth(self.username, self.api_key))

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #af7c81e7e6ea0c81 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:24 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #49dbc93fabefd298 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:75 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails/llama_index/readers/microsoft_outlook_emails/base.py:76 
        response = requests.get(url, headers=self._authorization_headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a9f6981feb2ec809 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:40 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-mondaydotcom/llama_index/readers/mondaydotcom/base.py:57 
        response = requests.post(url=self.api_url, json=data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8900d2d7a6796219 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:40 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:43 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #3997fecc252f89fa — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:60 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-openalex/llama_index/readers/openalex/base.py:63 
            response = requests.get(full_url, timeout=10)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #f3ee84b53a09e04c — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:169 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0e52612d3203ad93 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:185 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:187 
            response = requests.post(
                self.base_url,
                headers=headers,
                files=files,
                data={
                    "ocr": self.ocr,
                    "model": self.model,
                    "output_formats": f"['{self.output_format}']",
                    "coordinates": self.coordinates,
                    "base64_encoding": f"{self.base64_encoding}",
                },
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #22151211733d00b5 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:59 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e627046cdb2d7aab — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:95 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #b54028db43f9a961 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:135 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #5ec1bcee122bedb0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:130 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/readers/llama-index-readers-wordpress/llama_index/readers/wordpress/base.py:132 
        response = requests.get(url, auth=auth)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #301cce5671ff2d85 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:166 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:176 
        response = requests.post(api_url, headers=headers, json=body)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #e8fd93c7ff0e4753 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:41 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-azure-cv/llama_index/tools/azure_cv/base.py:39 
        response = requests.post(
            f"{self.cv_url}?features={','.join(features)}&language={self.language}&api-version={self.api_version}",
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            json={"url": url},
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #2d4898170f246021 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:27 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-bing-search/llama_index/tools/bing_search/base.py:25 
        response = requests.get(
            ENDPOINT_BASE_URL + endpoint,
            headers={"Ocp-Apim-Subscription-Key": self.api_key},
            params={"q": query, "mkt": self.lang, "count": self.results},
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #01a7c84b6d6901f7 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:37 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-brave-search/llama_index/tools/brave_search/base.py:41 
        response = requests.get(url, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #8875876609cc8c40 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:132 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:128 
            response = requests.get(
                self.base_url,
                params=params,
                headers={
                    "Authorization": f"Bearer {self.api_key}",
                },
                timeout=30,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #a7a7d76759396752 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:80 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/tools/llama-index-tools-wolfram-alpha/llama_index/tools/wolfram_alpha/base.py:81 
        response = requests.get(url, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
medium telemetry production #645a77caffa31c2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:121 
            self._run.track(
                Text(llm_input),
                name="prompt",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #b86ce20bc22a59f1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:128 
            self._run.track(
                Text(llm_output),
                name="response",
                step=self._llm_response_step,
                context={"event_id": event_id},
            )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #480e8c1303eb0c54 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-aim/llama_index/callbacks/aim/base.py:138 
                self._run.track(
                    Text(chunk),
                    name="chunk",
                    step=self._llm_response_step,
                    context={"chunk_id": chunk_id, "event_id": event_id},
                )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #660e4c0a55a9cddd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:10 
        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #0bb8b43204c96d14 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:13 
        from opentelemetry.sdk import trace as trace_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #5c3ad7dba88f0534 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix/llama_index/callbacks/arize_phoenix/base.py:14 
        from opentelemetry.sdk.trace.export import SimpleSpanProcessor

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
expand_more 295 low-confidence finding(s)
low env_fs test-only #f250b2d63d18a81c — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:30 
with open(data_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #be8b7949215408c3 — Filesystem access.
repo/docs/examples/discover_llamaindex/document_management/group_conversations.py:77 
with open("conversation_docs.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea957b10e911df08 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:119 
    with open(MKDOCS_YML) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56e6b9918859449f — Filesystem access.
repo/docs/scripts/prepare_for_build.py:144 
                    with open(toml_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f0446ac638572396 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:176 
                    with open(os.path.join(full_path, module_name), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccb1438172d03180 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:194 
    with open(MKDOCS_YML, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c59fddb08a8aa86e — Filesystem access.
repo/docs/scripts/prepare_for_build.py:202 
    with open("./src/content/docs/framework/CHANGELOG.md", "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #86f38dbef38e5f60 — Filesystem access.
repo/docs/scripts/prepare_for_build.py:210 
    with open("./src/content/docs/framework/CHANGELOG.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e675edd7fa31239a — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:39 
        with open(
            os.path.join(output_path, "config.json"), "w", encoding="utf-8"
        ) as fOut:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #720cd9a251812439 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-adapter/llama_index/embeddings/adapter/utils.py:48 
        with open(os.path.join(input_path, "config.json"), encoding="utf-8") as fIn:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b04297ba9466714b — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:259 
        aws_region = aws_region or os.getenv("AWS_REGION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #48444f38b8458e6a — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:260 
        aws_access_key_id = aws_access_key_id or os.getenv("AWS_ACCESS_KEY_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89813b570a89f80f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:261 
        aws_secret_access_key = aws_secret_access_key or os.getenv(
            "AWS_SECRET_ACCESS_KEY"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43695772ada07ea4 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-bedrock/llama_index/embeddings/bedrock/base.py:264 
        aws_session_token = aws_session_token or os.getenv("AWS_SESSION_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c6a3de6c98a34326 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:52 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bfc897d92de45162 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:53 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4f020292557212d3 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-clarifai/llama_index/embeddings/clarifai/base.py:55 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #198d1fced6d2d1a7 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-cohere/llama_index/embeddings/cohere/base.py:298 
            with open(image_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e78673f741cbe2ff — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-deepinfra/llama_index/embeddings/deepinfra/base.py:75 
        self._api_token = api_token or os.getenv(ENV_VARIABLE, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c4f53e43ccb08acb — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:34 
NEO4J_USERNAME = os.getenv("NEO4J_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #8448008d4c5e9427 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:35 
NEO4J_PASSWORD = os.getenv("NEO4J_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b73294f15828c26 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:36 
NEO4J_URL = os.getenv("NEO4J_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #de7ac379c2e5e7ed — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:37 
NEO4J_DATABASE = os.getenv("NEO4J_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a65d5a6ef44ca36e — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-gaudi/examples/graphrag.py:327 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4eacb8b6ec0c358f — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:200 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75ce9bddbe5226ea — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:201 
        vertexai = vertexai_config is not None or os.getenv(
            "GOOGLE_GENAI_USE_VERTEXAI", False
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #abcd2bc26be7a950 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #29d874af739c9af0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-google-genai/llama_index/embeddings/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c9354ba4ba4da39d — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:40 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #db88742444756bd9 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:41 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5c7726a1c23ac584 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:51 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9810a42ae04e658 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:62 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fd91339800cec54a — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:64 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fcd1a503bdcc106 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:66 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6706f64cc137adde — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:76 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7760a4b2af340ca0 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:81 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9c3a7a6e284b8fe9 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-ibm/llama_index/embeddings/ibm/utils.py:90 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d64b6000cbd302ce — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-jinaai/llama_index/embeddings/jinaai/base.py:155 
    with open(file_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #053aeb0179e7c14a — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai/llama_index/embeddings/mixedbreadai/base.py:84 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed0795d3ab5215ef — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-netmind/llama_index/embeddings/netmind/base.py:35 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2a4e2fc3a817cf25 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-nvidia/llama_index/embeddings/nvidia/base.py:31 
        default_factory=lambda: os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0c67a8c8bfdc2808 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-oci-genai/llama_index/embeddings/oci_genai/base.py:190 
                        with open(
                            oci_config.get("security_token_file"), encoding="utf-8"
                        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a58f812c1451402 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-openai/llama_index/embeddings/openai/utils.py:154 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cd42ff7db678b0c2 — Environment-variable access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-together/llama_index/embeddings/together/base.py:29 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #46459a5694225ad8 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/base.py:123 
                    response = requests.post(
                        DEFAULT_YANDEXGPT_API_BASE, json=payload, headers=header
                    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #6eecdbea129853b3 — Filesystem access.
repo/llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt/llama_index/embeddings/yandexgpt/util.py:60 
        with open(fn, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89a1dd6529520b01 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:127 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d52be0c5a3dc8504 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch/llama_index/readers/alibabacloud_aisearch/base.py:265 
                content=base64.b64encode(open(file_path, "rb").read()).decode(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #07373d296f602486 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:145 
            with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #41dba1821a353194 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-azstorage-blob/llama_index/readers/azstorage_blob/base.py:245 
                with open(file=download_file_path, mode="wb") as download_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #89d5b5b4a1582435 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:29 
        if os.getenv("BITBUCKET_USERNAME") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f99e8d45eac5b26f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:31 
        if os.getenv("BITBUCKET_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1576c9e8445cadde — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:44 
        username = os.getenv("BITBUCKET_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0120c74c3ffc3d46 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-bitbucket/llama_index/readers/bitbucket/base.py:45 
        api_token = os.getenv("BITBUCKET_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3d2345837c5474ae — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:19 
    client_id = os.getenv("BOX_CLIENT_ID", "YOUR_BOX_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #dfb90c5d7e3a95df — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:20 
    client_secret = os.getenv("BOX_CLIENT_SECRET", "YOUR_BOX_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #34ad502d9d91f540 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:23 
    enterprise_id = os.getenv("BOX_ENTERPRISE_ID", "YOUR_BOX_ENTERPRISE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #cdc116b72172a5fa — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-box/examples/box_reader.py:24 
    ccg_user_id = os.getenv("BOX_USER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d11ea1ed35e8a10 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-box/llama_index/readers/box/BoxAPI/box_api.py:161 
    with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #52f58140e8ae07fc — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-chatgpt-plugin/llama_index/readers/chatgpt_plugin/base.py:24 
        self._bearer_token = bearer_token or os.getenv("BEARER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f1961460dd28bdc — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:60 
        with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #929d6d27b7ab5d94 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:204 
                api_token = os.getenv(CONFLUENCE_API_TOKEN)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54368b1af5fc3c0a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:210 
                    user_name = os.getenv(CONFLUENCE_USERNAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf5ab548b2c330ac — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-confluence/llama_index/readers/confluence/base.py:211 
                    password = os.getenv(CONFLUENCE_PASSWORD)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #dc9b273a7d0f0fc8 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-dad-jokes/llama_index/readers/dad_jokes/base.py:19 
        response = requests.get(
            "https://icanhazdadjoke.com/", headers={"Accept": "application/json"}
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #c7a4bd320985843c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:31 
DASHSCOPE_DEFAULT_DC_CATEGORY = os.getenv(
    "DASHSCOPE_DEFAULT_DC_CATEGORY", default="default"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e41d52436a32550b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:102 
            api_key = os.getenv("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5f8d3b42453ad68e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:115 
            return os.getenv("DASHSCOPE_WORKSPACE_ID", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a65e6b6dd22e6624 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:125 
            return os.getenv("DASHSCOPE_CATEGORY_ID", DASHSCOPE_DEFAULT_DC_CATEGORY)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6abe6ace321af21e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:135 
                os.getenv("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #308b4ef23ed2746f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/base.py:162 
        with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5a0781036241a882 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-dashscope/llama_index/readers/dashscope/utils.py:30 
    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #009682c76cdbe57d — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-discord/llama_index/readers/discord/base.py:114 
            discord_token = os.environ["DISCORD_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b8574f0e43b6402a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-docstring-walker/llama_index/readers/docstring_walker/base.py:116 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f0e83dfcdac36a1 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:44 
    access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a2c013246bdddc32 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-docugami/llama_index/readers/docugami/base.py:87 
        access_token: Optional[str] = os.environ.get("DOCUGAMI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #736b0ebf98b03812 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-feedly-rss/llama_index/readers/feedly_rss/base.py:37 
            auth_file.write_text(auth.strip())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #270fbfbb4baedd97 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:109 
    app_id = os.environ.get("FEISHU_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2cf3ee03fc7c2514 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:110 
    app_secret = os.environ.get("FEISHU_APP_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #27507fd958ea5ad6 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-feishu-docs/llama_index/readers/feishu_docs/base.py:112 
    print(reader.load_data(document_ids=[os.environ.get("FEISHU_DOC_ID")]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #95e5245a8b74c077 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/html/base.py:36 
        with open(file, encoding="utf-8") as html_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37404db7667c8200 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/paged_csv/base.py:43 
        with open(file, encoding=self._encoding) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a403aee28cbb6f5a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/rtf/base.py:35 
        with open(str(input_file)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7248a033a6c3bf83 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-file/llama_index/readers/file/tabular/base.py:49 
        with open(file) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fc2cd844d3497bd6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:97 
            with open(env_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b170d2b7581a221e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:102 
                        os.environ[key.strip()] = value.strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59cc095ea01ead61 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:105 
    api_token = os.getenv("GITBOOK_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d08853b388dcd331 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-gitbook/llama_index/readers/gitbook/base.py:106 
    space_id = os.getenv("GITBOOK_SPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ba84eb2e0e6930b2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:24 
    with open(key_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #5c14ec49fa7402d9 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:33 
    app_id = os.getenv("GITHUB_APP_ID", "123456")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #84072949f1bbf056 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:34 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID", "789012")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #c71d51b4fc4240fe — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:37 
    private_key_path = os.getenv("GITHUB_PRIVATE_KEY_PATH", "path/to/your-app.private-key.pem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #688ca8879bcf53a5 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:43 
        private_key = os.getenv("GITHUB_PRIVATE_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d61ee9fded43b0f8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:83 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52ebb72e3f5b4f9f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:84 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #60254b4567b53e5b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:85 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #6b8eb3107edbb5eb — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:119 
    app_id = os.getenv("GITHUB_APP_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #26e62a302c4c0bb8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:120 
    installation_id = os.getenv("GITHUB_INSTALLATION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46cc759ad0822014 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:121 
    private_key = os.getenv("GITHUB_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #529f00fb59dfe519 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/examples/github_app_example.py:165 
    example = os.getenv("EXAMPLE", "basic")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5703a0fe43c9e7fb — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/collaborators/github_client.py:103 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #54adc8ea173f3339 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/issues/github_client.py:104 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #708185259a168d0d — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/base.py:1038 
    github_client = GithubClient(github_token=os.environ["GITHUB_TOKEN"], verbose=True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f34824e76823a068 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-github/llama_index/readers/github/repository/github_client.py:329 
                github_token = os.getenv("GITHUB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6844fc4e1cf19765 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/calendar/base.py:137 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93b10df47b1a2866 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/chat/base.py:281 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fa192fdc42b675e — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:125 
                with open("credentials.json") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa6b13d6a58d5c8b — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/docs/base.py:133 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f695ab22a46ce24 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:104 
            with open(credentials_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1c735039f07598a1 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:108 
            with open(token_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #440ee87a3663f64d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:112 
            with open(service_account_key_path, encoding="utf-8") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59ac1711fbe12c2e — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:196 
                with open(self.token_path, "w", encoding="utf-8") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8d73c3b0fdfe3762 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:485 
            with open(new_file_name, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3663da30531a41d5 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/drive/base.py:728 
            with open(downloaded_file, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #674aae50454b6902 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/gmail/base.py:85 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0edf9b670a44dec7 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/keep/base.py:58 
            with open("keep_credentials.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #33e54f82919e4abc — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:39 
        self.api_key = api_key or os.getenv("GOOGLE_MAPS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #46e451fb4a9048a5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/maps/base.py:141 
        response = requests.post(SEARCH_TEXT_BASE_URL, headers=headers, data=payload)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #510709c5632c3745 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-google/llama_index/readers/google/sheets/base.py:205 
            with open("token.json", "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3d6bcb37eb5fcf3d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:44 
    with open(ignore_file_path) as ignore_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13379e57a52396fc — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-gpt-repo/llama_index/readers/gpt_repo/base.py:79 
                with open(file_path, errors="ignore", encoding=encoding) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #55560b104051fb11 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-guru/llama_index/readers/guru/base.py:75 
        response = requests.get(initial_url, auth=self.guru_auth)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f20e1acac9d2973d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:32 
        test_data = self.fs.read_bytes(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2636f05c1bcaf1aa — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-huggingface-fs/llama_index/readers/huggingface_fs/base.py:40 
                with open(tmp / "tmp.jsonl.gz", "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9bac4464d9607677 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-jaguar/llama_index/readers/jaguar/base.py:255 
        with open("/tmp/debugjaguarrdr.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f77b2e72275e129a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:73 
        if "JOPLIN_ACCESS_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7524b5666b7355d1 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-joplin/llama_index/readers/joplin/base.py:74 
            return os.environ["JOPLIN_ACCESS_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #758ef3c50047872a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-json/llama_index/readers/json/base.py:100 
        with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f191169660a8d4ae — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:69 
            os.environ["TIKA_SERVER_ENDPOINT"] = tika_server_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ebefd0776504e50 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:74 
            os.environ["TIKA_SERVER_JAR"] = tika_server_jar_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cf7fb97b5f8627be — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:80 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2d39fe6d9bc6fbca — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:83 
                os.environ["TIKA_SERVER_JAR"] = str(cached_jar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #81a5e7e47095400a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:90 
                os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #201b3b276af3e6b2 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-legacy-office/llama_index/readers/legacy_office/reader.py:101 
        os.environ["TIKA_SERVER_ENDPOINT"] = "http://localhost:9998"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #3130d55084c816db — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-linear/llama_index/readers/linear/base.py:30 
        response = requests.post(graphql_endpoint, json=payload, headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7a01aba95b715b92 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:277 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ea5df03e8fd593f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-onedrive/llama_index/readers/microsoft_onedrive/base.py:858 
            with open(local_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2c69109f7f817c77 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint/llama_index/readers/microsoft_sharepoint/base.py:447 
        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8866f802f24f6e79 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-notion/llama_index/readers/notion/base.py:36 
            integration_token = os.getenv(INTEGRATION_TOKEN_NAME)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5550de812ef3232d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-opendal/llama_index/readers/opendal/base.py:73 
        with open(filepath, "wb") as w:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #de80ab5027d124b6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-oracleai/llama_index/readers/oracleai/base.py:134 
            with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2b86d11ef833e6d5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:43 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #1d56670d1078194c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-papers/llama_index/readers/papers/pubmed/base.py:126 
        resp = requests.get(
            "https://eutils.ncbi.nlm.nih.gov/entrez/eutils/esearch.fcgi",
            params=parameters,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ee66f5098b30e97b — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:38 
            self.api_key = os.getenv("PATENTSVIEW_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #25a3254a1cd6faad — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:65 
        response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #65c1fbe937010ada — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-patentsview/llama_index/readers/patentsview/base.py:70 
            response = requests.post(BASE_URL, json=self.json, headers=self.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #988d67714950f014 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:16 
CLASSIFIER_URL = os.getenv("PEBBLO_CLASSIFIER_URL", "http://localhost:8000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ef3fedf633bb72f0 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-pebblo/llama_index/readers/pebblo/utility.py:212 
        path=os.environ["PWD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c079325750fdabc5 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-psychic/llama_index/readers/psychic/base.py:39 
            psychic_key = os.environ["PSYCHIC_SECRET_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93b1c8b0c5aacf1e — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:35 
            client_id=os.getenv("REDDIT_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #60ba409825002b89 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:36 
            client_secret=os.getenv("REDDIT_CLIENT_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8046b2fcefd1cffd — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:37 
            user_agent=os.getenv("REDDIT_USER_AGENT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5502bfa223695ea9 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:38 
            username=os.getenv("REDDIT_USERNAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8aedfdd577586457 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-reddit/llama_index/readers/reddit/base.py:39 
            password=os.getenv("REDDIT_PASSWORD"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #873155ae6c3e5f92 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-remote/llama_index/readers/remote/base.py:88 
                with open(filepath, "wb") as output:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f339260bb6ca611 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:86 
                    with open(
                        f"data/{curr_tic}/{curr_year}/{curr_filing_type}.json", "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d9cb9daff1e21b17 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/base.py:92 
                    with open(
                        f"data/{curr_tic}/{curr_year[:-2]}/{curr_filing_type}_{curr_year[-2:]}.json",
                        "w",
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6df83e2d26326951 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/app.py:22 
allowed_origins = os.environ.get("ALLOWED_ORIGINS", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d0c762230d2644ee — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/api/section.py:223 
    allowed_mimetypes_str = os.environ.get("UNSTRUCTURED_ALLOWED_MIMETYPES")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c41cb602deff4a1f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:252 
        company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bdad848b741f3751 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/prepline_sec_filings/fetch.py:254 
        email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69c8d74d2f25c6a8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:345 
            company = os.environ.get("SEC_API_ORGANIZATION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #846933f4ddbdebbc — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-sec-filings/llama_index/readers/sec_filings/sec_filings.py:347 
            email = os.environ.get("SEC_API_EMAIL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #325493bbbe9c3e98 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:68 
            with open(file_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3918cea4ebcb51db — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-semanticscholar/llama_index/readers/semanticscholar/base.py:126 
                    pdf = PdfReader(open(file_path, "rb"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11018db59b6c1aaf — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:66 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #da7696531692886d — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:147 
            with open(custom_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #595b5a57b9d29c91 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:208 
            with open(custom_file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #578ea7e7eb6d3b4f — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-service-now/llama_index/readers/service_now/base.py:379 
            with open(test_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #23cc5237b8f97f12 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-slack/llama_index/readers/slack/base.py:62 
            slack_token = os.environ["SLACK_BOT_TOKEN"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e7efd53cde4ad55a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:87 
        self._api_key = api_key or os.environ.get("STACKOVERFLOW_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f2bc055e72591210 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:88 
        self._team_name = team_name or os.environ.get("STACKOVERFLOW_TEAM_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8ec935e82826950 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:107 
                    with open(fp) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #080ac122756f7f44 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:116 
                    with open(
                        os.path.join(self._cache_dir, f"{doc_type}_{page}.json"), "w"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cafc07b935760e6f — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:170 
        os.environ.get("STACKOVERFLOW_PAT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1ddc120e3ce05dc5 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-stackoverflow/llama_index/readers/stackoverflow/base.py:171 
        os.environ.get("STACKOVERFLOW_TEAM_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #375a83ddd57d33ac — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:372 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #50ce7edade803841 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-uniprot/llama_index/readers/uniprot/base.py:400 
        with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3383e9310136ea16 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:95 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #912bad004dff456c — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:96 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #a0c5f5e157fb6c1c — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:171 
            response = requests.post(
                LAYOUT_ANALYSIS_URL, headers=headers, files=files, data=options
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #d397be3e1c7f3c6a — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:356 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2eb9e9e632dc4642 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:388 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a3ffecb614b87d6 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/base.py:408 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f18278571d3f9730 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:88 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6d0e34105a9df19a — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:89 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf3fc85d1bbdd529 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:381 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bd46067081a5e9e4 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:413 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #99c1ecd16f83d801 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-upstage/llama_index/readers/upstage/document_parse.py:433 
                    with open(file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #184b0f06097489d0 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/agentql_web/base.py:65 
            response = httpx.post(
                QUERY_DATA_ENDPOINT,
                headers=headers,
                json=payload,
                timeout=API_TIMEOUT_SECONDS,
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #ad02f7141dfb8e77 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/hyperbrowser_web/base.py:36 
        api_key = api_key or os.getenv("HYPERBROWSER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2daa11830aa8b491 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:107 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low egress production #39644a326e13af2d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/olostep_web/base.py:145 
        response = requests.post(api_url, headers=headers, json=data)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #bf77acb73fd4d998 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-web/llama_index/readers/web/readability_web/base.py:136 
            with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #625964e9884c3af3 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:92 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #56aa340c34fcbc71 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-whisper/llama_index/readers/whisper/base.py:125 
            with open(file_path_or_bytes, "rb") as audio_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3e912fce89554b2 — Filesystem access.
repo/llama-index-integrations/readers/llama-index-readers-wordlift/llama_index/readers/wordlift/base.py:285 
                with open(text) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30a22ba5b7da2bf8 — Environment-variable access.
repo/llama-index-integrations/readers/llama-index-readers-zulip/llama_index/readers/zulip/base.py:26 
        zulip_token = os.environ.get("ZULIP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5977fe7ee404a106 — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:214 
        with open(
            os.path.join(path, DEFAULT_PERSIST_FILENAME), "w", encoding=encoding
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c1f535d73bc196df — Filesystem access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-bm25/llama_index/retrievers/bm25/base.py:225 
        with open(os.path.join(path, DEFAULT_PERSIST_FILENAME), encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dee6266ffc3318ab — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:84 
            output = OpenAI(model=model, api_key=os.getenv("OPENAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f881ffb8b9cb0408 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:88 
            output = Anthropic(model=model, api_key=os.getenv("ANTHROPIC_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3359ec20384d51e — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:92 
            output = Cohere(model=model, api_key=os.getenv("COHERE_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #83eaa92fd4ff2418 — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:96 
            output = MistralAI(model=model, api_key=os.getenv("MISTRALAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #14d65255541a54eb — Environment-variable access.
repo/llama-index-integrations/selectors/llama-index-selectors-notdiamond/llama_index/selectors/notdiamond/base.py:100 
            output = TogetherLLM(model=model, api_key=os.getenv("TOGETHERAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f9a785659d3b57c2 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-agentql/llama_index/tools/agentql/agentql_rest_api_tool/base.py:54 
        self._api_key = os.getenv("AGENTQL_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #01a0ff3970cb996b — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore/llama_index/tools/aws_bedrock_agentcore/utils.py:6 
    return os.getenv("AWS_REGION") or os.getenv("AWS_DEFAULT_REGION") or "us-west-2"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #63ba8e60e49d8ecf — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:87 
        self.pool_management_endpoint: str = pool_management_endpoint or os.getenv(
            "AZURE_POOL_MANAGEMENT_ENDPOINT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb6b246cef2c26f0 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:192 
                            with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #87d786d494c0c260 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:231 
            data = open(local_file_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ab5b355bd9229ee6 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-azure-code-interpreter/llama_index/tools/azure_code_interpreter/base.py:281 
            with open(local_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #21151370b7d9b7b6 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-azure-translate/llama_index/tools/azure_translate/base.py:32 
        request = requests.post(
            ENDPOINT_BASE_URL,
            params={"api-version": "3.0", "to": language},
            headers=self.headers,
            json=[{"text": text}],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #f4aaf78d2211bf21 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:124 
        with open(output_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #dc1897ba59da89fd — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-brightdata/llama_index/tools/brightdata/base.py:308 
        trigger_response = requests.post(
            "https://api.brightdata.com/datasets/v3/trigger",
            params={"dataset_id": dataset_id, "include_errors": True},
            headers=self._headers,
            json=[request_data],
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #7a578e7ca7f5830e — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:33 
        elif os.environ["OPENAI_API_KEY"]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #82e9a594d0ddb356 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:34 
            self.OAI_token = os.environ["OPENAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e17810653dd1400b — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-cogniswitch/llama_index/tools/cogniswitch/base.py:104 
                files = {"file": open(file, "rb")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1fa6a235923f3221 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/ai_recommendations/base.py:35 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #866e34ff4f58af62 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-dappier/llama_index/tools/dappier/real_time_search/base.py:22 
        self.api_key = api_key or os.environ.get("DAPPIER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78ed45c906a9d4d1 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-elevenlabs/llama_index/tools/elevenlabs/base.py:107 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #31e150dfcca66eb2 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:179 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #693785ed5d6b15ea — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/calendar/base.py:202 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3cefcd826f86994f — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:116 
            with open(self.service_account_key_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00d16b8eed5237c4 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-google/llama_index/tools/google/gmail/base.py:139 
                with open(self.token_path, "w") as token:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8da0a5d66c91dd81 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:25 
        email: str = os.environ.get("JIRA_ACCOUNT_EMAIL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0af5e33bcd40a1be — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:26 
        api_key: Optional[str] = os.environ.get("JIRA_API_KEY", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #94dfc262342cc3d3 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-jira-issue/llama_index/tools/jira_issue/base.py:27 
        server_url: Optional[str] = os.environ.get("JIRA_SERVER_URL", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #67b4f79b32004eeb — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-mcp/examples/mcp_server.py:38 
        access_token=os.environ.get("IPINFO_API_TOKEN", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #563bc81e752f9a34 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:10 
    'hourly_weather': os.getenv('HOURLY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #80b00ebf9664054f — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:11 
    'daily_weather': os.getenv('DAILY_WEATHER_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #d2f04691e7952d7e — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:12 
    'daily_climate': os.getenv('DAILY_CLIMATE_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #941fb38065fb2295 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:13 
    'air_quality': os.getenv('AIR_QUALITY_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0cbc1c922c28a7a9 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-measurespace/examples/example.py:14 
    'geocoding': os.getenv('GEOCODING_API_KEY'),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #3557ebc332869073 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:14 
    MOSS_PROJECT_KEY = os.getenv("MOSS_PROJECT_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b65928d6a74ac9d — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:15 
    MOSS_PROJECT_ID = os.getenv("MOSS_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e081ee5f0f2ba08a — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-moss/examples/moss_agent.py:55 
    llm = OpenAI(api_key=os.environ["OPENAI_API_KEY"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #69aa8cff49093bb9 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-notion/llama_index/tools/notion/base.py:106 
        response = requests.post(SEARCH_URL, json=payload, headers=self.reader.headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #041b7cba5b811289 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-python-file/llama_index/tools/python_file/base.py:11 
        f = open(file_name).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #b6ee8f65a1aecb5c — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:8 
os.environ["SERPEX_API_KEY"] = "your_api_key_here"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #46e4ad0440201ce0 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/examples/serpex_example.py:101 
    if not os.environ.get("SERPEX_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #74283f30a7bca9ea — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/llama_index/tools/serpex/base.py:55 
        self.api_key = api_key or os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #44e1cb4c692efba6 — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-serpex/test_local.py:12 
    api_key = os.environ.get("SERPEX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6383b08e3f9ead8e — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:22 
    env = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c55818b5664e8cfd — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-signnow/llama_index/tools/signnow/base.py:55 
    candidate = explicit or os.environ.get("SIGNNOW_MCP_BIN") or "sn-mcp"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0972fc8d8644fc58 — Filesystem access.
repo/llama-index-integrations/tools/llama-index-tools-typecast/llama_index/tools/typecast/base.py:186 
        with open(output_path, "wb") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f97c903948d0001f — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/context.py:10 
    api_key=os.environ["VALYU_API_KEY"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #896976e47f78985d — Environment-variable access.
repo/llama-index-integrations/tools/llama-index-tools-valyu/examples/retriever_example.py:18 
        api_key=os.environ.get("VALYU_API_KEY", "your-api-key-here"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #2b7f14a3ab83b767 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/tools/llama-index-tools-zapier/llama_index/tools/zapier/base.py:60 
        response = requests.get(
            "https://nla.zapier.com/api/v1/dynamic/exposed/", headers=self._headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #67a1b312db09d89c — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:111 
            if "AZURE_COSMOSDB_MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3b9ee687bcb55279 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo/llama_index/vector_stores/azurecosmosmongo/base.py:117 
                os.environ["AZURE_COSMOSDB_MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #04e4d52b1fe0afd2 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-db2/llama_index/vector_stores/db2/base.py:44 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8a8a395e93e58595 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:72 
            with open(ref_docs_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8b8a8d57bdcfa41f — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-docarray/llama_index/vector_stores/docarray/hnsw.py:123 
        with open(os.path.join(self._work_dir, "ref_docs.json"), "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1e056a9d0c7b350c — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:244 
        with open(id_map_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2b9017b54869da50 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-faiss/llama_index/vector_stores/faiss/map_store.py:284 
        with open(id_map_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6b24ebe5089f1a85 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:152 
        with open(config_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #73ce1d8424e94541 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib/llama_index/vector_stores/hnswlib/base.py:216 
        with open(config_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c40f67e36cc45622 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar/llama_index/vector_stores/jaguar/base.py:497 
        with open("/tmp/debugjaguar.log", "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8520ac3e17ec3725 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:230 
            if api_key is None and os.getenv("LANCE_API_KEY") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #523e09e797b49f5a — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb/llama_index/vector_stores/lancedb/base.py:242 
                    uri, api_key=api_key or os.getenv("LANCE_API_KEY"), region=region

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fa8abeb61ed3500 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:188 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b875c40b7bb56d7f — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:194 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #00ca1973236b75b8 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:203 
            if "MONGODB_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30db51d4b2230317 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb/llama_index/vector_stores/mongodb/base.py:209 
                os.environ["MONGODB_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f5ad57e70a6d1cd2 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh/llama_index/vector_stores/moorcheh/base.py:103 
            self.api_key = os.getenv("MOORCHEH_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d538ab287e04cf42 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb/llama_index/vector_stores/oracledb/base.py:51 
log_level = os.getenv("LOG_LEVEL", "ERROR").upper()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #12f0d1746ce353c9 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:51 
    elif not api_key and not getenv("ROCKSET_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e4bb1406674c790e — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:57 
            api_key=api_key or getenv("ROCKSET_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c40ecb6dd29d819 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb/llama_index/vector_stores/rocksetdb/base.py:58 
            host=api_server or getenv("ROCKSET_API_SERVER"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bc3050346c82e468 — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:125 
        with open(config_path, "r" if jsonconfig else "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a19d3ddc04a804dc — Filesystem access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-txtai/llama_index/vector_stores/txtai/base.py:189 
        with open(
            config_path,
            "w" if jsonconfig else "wb",
            encoding="utf-8" if jsonconfig else None,
        ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d947df657652b352 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch/llama_index/vector_stores/vertexaivectorsearch/base.py:100 
    ENABLE_V2 = os.getenv("VERTEX_AI_ENABLE_V2", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #ea6ee64bcd55047e — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:26 
EMBEDDING_MODEL = os.getenv("ARK_EMBEDDING_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #0440b061a454b260 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:30 
LLM_MODEL = os.getenv("ARK_LLM_MODEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a4bdfac6f0b738b9 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:34 
ARK_API_KEY = os.getenv("ARK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #a700e11e9915198f — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:141 
    host = os.getenv("VEM_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #40d1bc8231e74ba6 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:142 
    port = int(os.getenv("VEM_PORT")) if os.getenv("VEM_PORT") else None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #7b2aef21750f19a1 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:143 
    user = os.getenv("VEM_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e81bf9172dfdf6b4 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:144 
    password = os.getenv("VEM_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #978b35bf8d87a096 — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:145 
    database = os.getenv("VEM_DATABASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #f8e424ca8fa50cbe — Environment-variable access.
repo/llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql/examples/volcengine_mysql_vector_store_demo.py:146 
    table_name = os.getenv("VEM_TABLE", "llamaindex_demo")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0751b781ac5594f7 — Environment-variable access.
repo/llama-index-integrations/voice_agents/llama-index-voice-agents-openai/llama_index/voice_agents/openai/base.py:74 
            openai_api_key = os.getenv("OPENAI_API_KEY", None) or self.api_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2ed0acdf54da9311 — Filesystem access.
repo/scripts/bulk-version-bump.py:26 
    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #13e6a8fd11fab4ae — Filesystem access.
repo/scripts/bulk-version-bump.py:28 
    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #69d54820e7851519 — Filesystem access.
repo/scripts/bulk-version-bump.py:81 
    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d1365674e71956fb — Filesystem access.
repo/scripts/convert-examples.py:204 
        out.write_text(body, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bcaecfb03e5aa506 — Filesystem access.
repo/scripts/convert-examples.py:231 
            meta.write_text(f"label: {transform_dir_name(d.name)}\ncollapsed: true\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa84d8bd246e49db — Filesystem access.
repo/scripts/convert-examples.py:259 
    content = src.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3614187c5dfac954 — Filesystem access.
repo/scripts/convert-examples.py:263 
    dst.write_text(content, encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b51d7e8f8e39f63 — Filesystem access.
repo/scripts/convert-examples.py:400 
    (int_dest / "_meta.yml").write_text(
        "label: Integrations\ncollapsed: true\norder: 998\n"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ad5d91ab2fc8959e — Filesystem access.
repo/scripts/integration_health_check.py:207 
            with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f3aed6d94f341c19 — Filesystem access.
repo/scripts/integration_health_check.py:273 
            with open("./core_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #726d229bc54f1a7b — Filesystem access.
repo/scripts/integration_health_check.py:286 
            with open("./core_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #a7a9b797e853f3c0 — Filesystem access.
repo/scripts/integration_health_check.py:366 
        with open("./all_package_metrics.json") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fb9003403d393004 — Filesystem access.
repo/scripts/integration_health_check.py:374 
        with open("./all_package_metrics.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-dashscope

python first-party
high pii_flow production #7ab61367e2be4bb3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:126 
        response = requests.put(
            base_url + UPSERT_PIPELINE_ENDPOINT,
            data=json.dumps(pipeline_create),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #58960c98783c695d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:141 
        response = requests.post(
            base_url + START_PIPELINE_ENDPOINT.format(pipeline_id=pipeline_id),
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 9 low-confidence finding(s)
low env_fs production #3a12bb9f987707a2 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:78 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8007daa41c89a2c4 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:79 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4c3f12bee1555907 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:80 
        self._base_url = os.environ.get("DASHSCOPE_BASE_URL", None) or base_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79dc6bc566a7885f — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:111 
        workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2dcd32bf90513abc — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:112 
        api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #30831d5699c31f2d — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/base.py:115 
            or os.environ.get("DASHSCOPE_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #75fe3b718b650a4e — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:47 
        self.workspace_id = workspace_id or os.environ.get("DASHSCOPE_WORKSPACE_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea93efaadaeb3ff3 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:48 
        self._api_key = api_key or os.environ.get("DASHSCOPE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #91bda71c5bd4ad56 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-dashscope/llama_index/indices/managed/dashscope/retriever.py:67 
            os.environ.get("DASHSCOPE_BASE_URL", None) or DASHSCOPE_DEFAULT_BASE_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-maritalk

python first-party
high pii_flow production #6ae86a93ffb8c5dd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:202 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:204 
        response = requests.post(self._endpoint, json=data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
high pii_flow production #0a26a6cc8ee8f592 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:289 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:292 
            response = requests.post(
                self._endpoint, json=data, headers=headers, stream=True
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 1 low-confidence finding(s)
low env_fs production #fea76b8756fb733c — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-maritalk/llama_index/llms/maritalk/base.py:138 
        self.api_key = self.api_key or os.getenv("MARITALK_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-mymagic

python first-party
high pii_flow production #529d503fc0eb0410 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:190 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/llms/llama-index-llms-mymagic/llama_index/llms/mymagic/base.py:193 
        resp = requests.post(
            self.completion_url,
            json=question_data,
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

first-party (python): llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope

python first-party
high pii_flow production #846d4802d82ac2f3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 · flow /tmp/closeopen-9n84klcb/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 → /tmp/closeopen-9n84klcb/repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:91 
            response = requests.post(
                service_url, data=json.dumps(my_input), headers=headers
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.
expand_more 2 low-confidence finding(s)
low env_fs production #5b454e8a5e9bfbed — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:77 
        DASHSCOPE_API_KEY = os.environ.get("DASHSCOPE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e92ab418507e8208 — Environment-variable access.
repo/llama-index-integrations/node_parser/llama-index-node-parser-relational-dashscope/llama_index/node_parser/dashscope/base.py:87 
            os.getenv("DASHSCOPE_BASE_URL", "https://dashscope.aliyuncs.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/observability/llama-index-observability-otel

python first-party
medium telemetry production #54e7655a27f1c1b6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:13 
from opentelemetry import context, propagate, trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #eefebeced9b83f32 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:14 
from opentelemetry.sdk.resources import SERVICE_NAME, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #545d4f36a166d93b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:15 
from opentelemetry.sdk.trace import SpanProcessor, TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #c3fe4b335d42a528 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:16 
from opentelemetry.sdk.trace.export import (
    BatchSpanProcessor,
    ConsoleSpanExporter,
    SimpleSpanProcessor,
    SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.
medium telemetry production #cd9a317c1a4ff05f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.
repo/llama-index-integrations/observability/llama-index-observability-otel/llama_index/observability/otel/base.py:22 
from opentelemetry.trace import set_span_in_context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

first-party (python): llama-dev

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #60c409abd206c9c9 — Environment-variable access.
repo/llama-dev/llama_dev/pkg/cmd_exec.py:44 
    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0f3888be77af873e — Filesystem access.
repo/llama-dev/llama_dev/release/changelog.py:84 
    with open(repo_root / "CHANGELOG.md", "r+") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #98087b108ffb070f — Filesystem access.
repo/llama-dev/llama_dev/release/check.py:20 
    with open(repo_root / "llama-index-core" / "pyproject.toml", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low egress production #d71e7a326b0d434d — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-dev/llama_dev/release/check.py:29 
        with urllib.request.urlopen(url, timeout=10) as response:

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #06166caad007df6d — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:16 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c24c902f4554044b — Filesystem access.
repo/llama-dev/llama_dev/release/prepare.py:23 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #70269cc5b3f58642 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:46 
    with open(pyproject_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1a91f727730249f5 — Filesystem access.
repo/llama-dev/llama_dev/utils.py:55 
    with open(pyproject_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8be0e90b8368195b — Filesystem access.
repo/llama-dev/llama_dev/utils.py:74 
    with open(pyproject_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-core

python first-party
expand_more 35 low-confidence finding(s)
low env_fs production #e3b2996b4bf94a43 — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:320 
    elif env_key and env_key in os.environ and os.environ[env_key]:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f49d68b4a25ef631 — Environment-variable access.
repo/llama-index-core/llama_index/core/base/llms/generic_utils.py:321 
        return os.environ[env_key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8732560700048de8 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:119 
    with open(mappings_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3c4f280538733319 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:206 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20da558ffae1521b — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:246 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4e407c5c67c5c7b4 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:251 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d8d374681a743bf0 — Filesystem access.
repo/llama-index-core/llama_index/core/command_line/upgrade.py:257 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7e4237877f18a9f4 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:18 
    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #34a2381e34a87565 — Filesystem access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:24 
    with open(file_path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8bd48c0056facc1d — Environment-variable access.
repo/llama-index-core/llama_index/core/embeddings/utils.py:43 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #52abe8990b57b795 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:38 
                save_file = open(
                    os.path.join(dataset_full_path, "dev_distractor.json"), "wb"
                )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs test-only #e47671c3918ee2b4 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/benchmarks/hotpotqa.py:74 
        f = open(dataset_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #2228eae05daa14ca — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:102 
        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #dc6e2856ee14e268 — Filesystem access.
repo/llama-index-core/llama_index/core/evaluation/dataset_generation.py:108 
        with open(path, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b55bd19f3da03943 — Environment-variable access.
repo/llama-index-core/llama_index/core/evaluation/retrieval/metrics.py:444 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7f304c4c237d4fd6 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:24 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae0930c1c21f65c6 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:25 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ee23f3109766a805 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:26 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5da51c081130cc17 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:43 
    base_url = base_url or os.environ.get("LLAMA_CLOUD_BASE_URL", DEFAULT_BASE_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0b2ddd5525f03d47 — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:44 
    app_url = app_url or os.environ.get("LLAMA_CLOUD_APP_URL", DEFAULT_APP_URL)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ccd29cf4e939b5da — Environment-variable access.
repo/llama-index-core/llama_index/core/ingestion/api_utils.py:45 
    api_key = api_key or os.environ.get("LLAMA_CLOUD_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9d9dcb2d05175013 — Environment-variable access.
repo/llama-index-core/llama_index/core/llms/utils.py:42 
        if os.getenv("IS_TESTING"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8e50c31e9f603d87 — Filesystem access.
repo/llama-index-core/llama_index/core/multi_modal_llms/generic_utils.py:44 
    with open(image_path, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9a1d7590d3f7941b — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:204 
            with open(obj_node_mapping_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6ae1059b7b94d046 — Filesystem access.
repo/llama-index-core/llama_index/core/objects/base_node_mapping.py:217 
            with open(obj_node_mapping_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f9a73de7dae6cb8 — Filesystem access.
repo/llama-index-core/llama_index/core/readers/json.py:102 
            with open(input_file, encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c8a7ad477f5fada7 — Filesystem access.
repo/llama-index-core/llama_index/core/schema.py:1433 
            img_bytes = self.image_resource.path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aacf785961f7211c — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:56 
        if "NLTK_DATA" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #064b60b3fd303aab — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:57 
            self._nltk_data_dir = str(Path(os.environ["NLTK_DATA"]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9170cec86c31fd87 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:167 
        if "TIKTOKEN_CACHE_DIR" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #43ad803480bb1324 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:169 
            os.environ["TIKTOKEN_CACHE_DIR"] = os.path.join(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #39345c0e32ea410e — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:179 
            del os.environ["TIKTOKEN_CACHE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #eb57f92b69d3d9d3 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:442 
    if "LLAMA_INDEX_CACHE_DIR" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e3e3b8baed303085 — Environment-variable access.
repo/llama-index-core/llama_index/core/utils.py:443 
        path = Path(os.environ["LLAMA_INDEX_CACHE_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c2763ff8103cd9eb — Filesystem access.
repo/llama-index-core/llama_index/core/utils.py:664 
        data = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/graph_rag/llama-index-graph-rag-cognee

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #3531978d4b45ce8f — Environment-variable access.
repo/llama-index-integrations/graph_rag/llama-index-graph-rag-cognee/example.py:24 
    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/graph_stores/llama-index-graph-stores-nebula

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #31d07802b2ff0afc — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:213 
            key in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40b7c99d67fcfde2 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:221 
        graphd_host, graphd_port = os.environ["NEBULA_ADDRESS"].split(":")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #88ac41c4a0475adf — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:223 
            os.environ["NEBULA_USER"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b254a3833139f082 — Environment-variable access.
repo/llama-index-integrations/graph_stores/llama-index-graph-stores-nebula/llama_index/graph_stores/nebula/nebula_graph_store.py:224 
            os.environ["NEBULA_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-bge-m3

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #a41d10c1347079c7 — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:133 
        with open(Path(persist_dir) / "multi_embed_store.pkl", "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ed84216d98f4ca1c — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-bge-m3/llama_index/indices/managed/bge_m3/base.py:158 
            open(Path(persist_dir) / "multi_embed_store.pkl", "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-lancedb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #92d28adeee6214d9 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-lancedb/llama_index/indices/managed/lancedb/utils.py:25 
            self.api_key = os.getenv("LANCEDB_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/indices/llama-index-indices-managed-vectara

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #cf9cbbc4190461ad — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:88 
            os.environ.get("VECTARA_CORPUS_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #357ef3f0665bd9e0 — Environment-variable access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:91 
        self._vectara_api_key = vectara_api_key or os.environ.get("VECTARA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #40379adc1feb610f — Filesystem access.
repo/llama-index-integrations/indices/llama-index-indices-managed-vectara/llama_index/indices/managed/vectara/base.py:362 
        files = {"file": (filename, open(file_path, "rb"))}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-aibadgr

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #1aa445c20ecee955 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:41 
        api_key = api_key or os.environ.get("AIBADGR_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ae4774a2a2e29071 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-aibadgr/llama_index/llms/aibadgr/base.py:42 
        api_base = os.environ.get("AIBADGR_BASE_URL", api_base)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-asi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f5a9c336e91787c4 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-asi/llama_index/llms/asi/base.py:65 
        api_key = api_key or os.environ.get("ASI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-azure-openai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #9c54d28311e7f381 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/base.py:236 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #20f3ed796a3ed200 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:141 
            api_key = api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #0507f1b60cd1eb10 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-azure-openai/llama_index/llms/azure_openai/responses.py:223 
            self.api_key = self.api_key or os.getenv("AZURE_OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-cerebras

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #2e2057218167b3f0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:32 
        api_base: str = os.environ.get("CEREBRAS_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7ba1d95bdd58fbd6 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cerebras/llama_index/llms/cerebras/base.py:37 
        api_key = api_key or os.environ.get("CEREBRAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-clarifai

python first-party
expand_more 3 low-confidence finding(s)
low env_fs production #b8de883d2ef88dc0 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:83 
        if pat is None and os.environ.get("CLARIFAI_PAT") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3caff1713ba31ff1 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:84 
            pat = os.environ.get("CLARIFAI_PAT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #304bc7897ae03486 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-clarifai/llama_index/llms/clarifai/base.py:86 
        if not pat and os.environ.get("CLARIFAI_PAT") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-cortex

python first-party
expand_more 11 low-confidence finding(s)
low env_fs production #7f034908d7c3fcf8 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:111 
        default=os.environ.get("SNOWFLAKE_USERNAME", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #06bde957dfef6855 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:115 
        default=os.environ.get("SNOWFLAKE_ACCOUNT", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #37528cfc2e946e8d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:119 
        default=os.environ.get("SNOWFLAKE_KEY_FILE", None),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #5d05581e64c33935 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:172 
        self.user = user or os.environ.get("SNOWFLAKE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1be1526b149a3492 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:173 
        self.account = account or os.environ.get("SNOWFLAKE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #3f0a835cc92e3c2b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:177 
        env_key_file = os.environ.get("SNOWFLAKE_KEY_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #807c3fd93fd8af3b — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/base.py:184 
                with open(jwt_token) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #7a18d3a5b5156441 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:22 
    with open(SPCS_TOKEN_PATH) as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #79f03c0e19239a6d — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:32 
        os.path.exists(SPCS_TOKEN_PATH) and os.environ.get("SNOWFLAKE_HOST") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e9ffff2612dd39ab — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:45 
    return os.getenv("SNOWFLAKE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d97465817ecb0726 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-cortex/llama_index/llms/cortex/utils.py:61 
    with open(sf_private_key_filepath, "rb") as pem_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-databricks

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #de422eac5d08f058 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:36 
        api_key = api_key or os.environ.get("DATABRICKS_TOKEN", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #1696df133bb4c4d4 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-databricks/llama_index/llms/databricks/base.py:37 
        api_base = api_base or os.environ.get("DATABRICKS_SERVING_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-deepseek

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #870fcf3f588633ce — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-deepseek/llama_index/llms/deepseek/base.py:36 
        api_key = api_key or os.environ.get("DEEPSEEK_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-featherlessai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #03e6771f41b8c9ae — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-featherlessai/llama_index/llms/featherlessai/base.py:37 
        api_key = api_key or os.environ.get("FEATHERLESS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-gaudi

python first-party
expand_more 10 low-confidence finding(s)
low env_fs test-only #1f200d9c7faf8509 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/examples/basic.py:301 
    args.quant_config = os.getenv("QUANT_CONFIG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #bf85cc6674c06a12 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:98 
    args.local_rank = int(os.getenv("LOCAL_RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6897a3f75b6c5b05 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:99 
    args.world_size = int(os.getenv("WORLD_SIZE", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #71846b579e28395a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:100 
    args.global_rank = int(os.getenv("RANK", "0"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #77a369c5095ea620 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:113 
        const_marking = os.getenv("ENABLE_CONST_MARKING", "True")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea7d622c3021d25f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:135 
    os.environ.setdefault("EXPERIMENTAL_WEIGHT_SHARING", "FALSE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #59fde6389c040d5e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:138 
        os.environ.setdefault("GRAPH_VISUALIZATION", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4462cb7fd3e2f1c7 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:142 
        os.environ.setdefault("PT_HPU_LAZY_ACC_PAR_MODE", "0")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #38a06629de350a1b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:143 
        os.environ.setdefault("PT_HPU_ENABLE_LAZY_COLLECTIVES", "true")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #11ce2fcf3a038d59 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-gaudi/llama_index/llms/gaudi/utils.py:153 
        os.environ.setdefault("PT_HPUGRAPH_DISABLE_TENSOR_CACHE", "1")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-google-genai

python first-party
expand_more 4 low-confidence finding(s)
low env_fs production #b526418527051840 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:199 
        api_key = api_key or os.getenv("GOOGLE_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #997bba6abb13695e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:202 
            or os.getenv("GOOGLE_GENAI_USE_VERTEXAI", "false") != "false"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #9b059744b25aaa9b — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:204 
        project = (vertexai_config or {}).get("project") or os.getenv(
            "GOOGLE_CLOUD_PROJECT", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d6ea0c5d9291cd83 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-google-genai/llama_index/llms/google_genai/base.py:207 
        location = (vertexai_config or {}).get("location") or os.getenv(
            "GOOGLE_CLOUD_LOCATION", None
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-groq

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5fb5abdee44d4ca1 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-groq/llama_index/llms/groq/base.py:37 
        api_key = api_key or os.environ.get("GROQ_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-ibm

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #d398f866d2fdbb66 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:38 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #78c88440c52b2f88 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:39 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #ea74af680a946b19 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:49 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #f91f403341f66a07 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:60 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #8ee93abd7a9d23ed — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:62 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #fa71fb8bea0f2f14 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:64 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e49e0f02d6ada030 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:74 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #93c70ce88290bb73 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:79 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e2d87227dd48ee14 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ibm/llama_index/llms/ibm/utils.py:88 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-keywordsai

python first-party
expand_more 2 low-confidence finding(s)
low egress production #351644a399c34bc5 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:50 
        response = requests.get("https://api.keywordsai.co/api/models/public")

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.
low env_fs production #e50cba737845e625 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-keywordsai/llama_index/llms/keywordsai/utils.py:166 
    openai_api_key = api_key or os.environ.get("KEYWORDSAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-llama-cpp

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #7f00fefbb2413a01 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-llama-cpp/llama_index/llms/llama_cpp/base.py:232 
                with open(model_path, "wb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-meta

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #737cdc79524ac8b8 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-meta/llama_index/llms/meta/base.py:42 
        api_key = api_key or os.environ.get("LLAMA_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-minimax

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #0ea553dbeed5e895 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-minimax/llama_index/llms/minimax/base.py:43 
        api_key = api_key or os.environ.get("MINIMAX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-modelslab

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #969cd3ca125bb34f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-modelslab/llama_index/llms/modelslab/base.py:68 
        api_key = api_key or os.environ.get("MODELSLAB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nebius

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #8124ba28e5254d88 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nebius/llama_index/llms/nebius/base.py:42 
        api_key = api_key or os.environ.get("NEBIUS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-netmind

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5b18786251db503e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-netmind/llama_index/llms/netmind/base.py:39 
        api_key = api_key or os.environ.get("NETMIND_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #b31aebba53ac5b8a — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia/llama_index/llms/nvidia/base.py:52 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #e1f687b8c820eb35 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:182 
                with open(config_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #e5039bae9ee75367 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-nvidia-tensorrt/llama_index/llms/nvidia_tensorrt/base.py:245 
                with open(serialize_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-oci-genai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #ac2b05667f709a01 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-oci-genai/llama_index/llms/oci_genai/utils.py:141 
                with open(oci_config.get("security_token_file"), encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-openai

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #c50135142328fced — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-openai/llama_index/llms/openai/utils.py:1039 
    openai_api_key = api_key or os.environ.get("OPENAI_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-ovhcloud

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #25c299dd615b3563 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-ovhcloud/llama_index/llms/ovhcloud/base.py:109 
            api_key = os.environ.get("OVHCLOUD_API_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-paieas

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #eed3ec00dff375fd — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:24 
        api_key = api_key or os.environ.get("PAIEAS_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6a234c17a48984a2 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-paieas/llama_index/llms/paieas/base.py:25 
        api_base = api_base or os.environ.get("PAIEAS_API_BASE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-palm

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #6f4aac2c978fcf00 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-palm/llama_index/llms/palm/base.py:86 
        api_key = api_key or os.environ.get("PALM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-perplexity

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #ba97dea534290e3f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-perplexity/llama_index/llms/perplexity/base.py:118 
        api_key = api_key or getenv("PPLX_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-pipeshift

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #3ec07738689e7b7f — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-pipeshift/llama_index/llms/pipeshift/base.py:64 
        api_key = api_key or os.environ.get("PIPESHIFT_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-predibase

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #a1095396036aa704 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:121 
            else os.environ.get("PREDIBASE_API_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #411924affb7ac8a9 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-predibase/llama_index/llms/predibase/base.py:166 
            os.environ["PREDIBASE_GATEWAY"] = "https://api.app.predibase.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-reka

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #b446b88b5af659e3 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-reka/llama_index/llms/reka/base.py:117 
        api_key = api_key or os.getenv("REKA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-replicate

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #77fa255811ac2134 — Filesystem access.
repo/llama-index-integrations/llms/llama-index-llms-replicate/llama_index/llms/replicate/base.py:97 
                base_kwargs["image"] = open(self.image, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-together

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #64807ad86b22c40e — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-together/llama_index/llms/together/base.py:39 
        api_key = api_key or os.environ.get("TOGETHER_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-yi

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #f97b9d7f16735458 — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-yi/llama_index/llms/yi/base.py:90 
        api_key = api_key or os.environ.get("YI_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/llms/llama-index-llms-you

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #951e8e8f303b47ef — Environment-variable access.
repo/llama-index-integrations/llms/llama-index-llms-you/llama_index/llms/you/base.py:125 
        return self.ydc_api_key or os.environ["YDC_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5a62915889b5e4de — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-aimon-rerank/llama_index/postprocessor/aimon_rerank/base.py:41 
            api_key = api_key or os.environ["AIMON_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #0aa4cc5732aae386 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-cohere-rerank/llama_index/postprocessor/cohere_rerank/base.py:74 
            api_key = api_key or os.environ["COHERE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #a372ffa4566e2a65 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-contextual-rerank/llama_index/postprocessor/contextual_rerank/base.py:45 
            api_key = api_key or os.environ["CONTEXTUAL_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #c44589e70c69d5e7 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-dashscope-rerank/llama_index/postprocessor/dashscope_rerank/base.py:35 
            api_key = api_key or os.environ["DASHSCOPE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #756dd9da731ea03f — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-google-rerank/llama_index/postprocessor/google_rerank/base.py:79 
            self.project_id = os.environ.get("GOOGLE_CLOUD_PROJECT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-ibm

python first-party
expand_more 9 low-confidence finding(s)
low env_fs production #ca6934d520b63100 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:37 
        if not (apikey or "WATSONX_APIKEY" in os.environ) and not (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #c48c67ff5b659f44 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:38 
            token or "WATSONX_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #b617fd65492415f6 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:48 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #aa3c79c516de5fd5 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:59 
            and "WATSONX_TOKEN" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #4fd2358c0f4bbda0 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:61 
            and "WATSONX_PASSWORD" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #6499c1e3dca57feb — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:63 
            and "WATSONX_APIKEY" not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #d81938a959f58610 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:73 
        elif token or "WATSONX_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #cb898f68c8cb2313 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:78 
        elif password or "WATSONX_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #974d74bd5d830707 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-ibm/llama_index/postprocessor/ibm/utils.py:87 
        elif apikey or "WATSONX_APIKEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #252782aedd4ae9d3 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-mixedbreadai-rerank/llama_index/postprocessor/mixedbreadai_rerank/base.py:56 
            api_key = api_key or os.environ["MXBAI_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #c063613e6314b458 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-nvidia-rerank/llama_index/postprocessor/nvidia_rerank/base.py:72 
        base_url: Optional[str] = os.getenv("NVIDIA_BASE_URL", BASE_URL),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #33455d871a9b2488 — Environment-variable access.
repo/llama-index-integrations/postprocessor/llama-index-postprocessor-pinecone-native-rerank/llama_index/postprocessor/pinecone_native_rerank/base.py:38 
            api_key = api_key or os.environ["PINECONE_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever

python first-party
expand_more 2 low-confidence finding(s)
low env_fs production #4acd9cfde90e19df — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:48 
            if "MONGO_URI" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.
low env_fs production #028def76dbbafddc — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-mongodb-atlas-bm25-retriever/llama_index/retrievers/mongodb_atlas_bm25_retriever/base.py:54 
                os.environ["MONGO_URI"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-tldw

python first-party
expand_more 1 low-confidence finding(s)
low egress production #1af55dd8d722a3e4 — Hardcoded external endpoint. Review what data is sent to this destination.
repo/llama-index-integrations/retrievers/llama-index-retrievers-tldw/llama_index/retrievers/tldw/base.py:74 
        res = requests.post(
            f"{API_ENDPOINT}/search",
            headers=headers,
            json={
                "collection_id": self._collection_id,
                "search_term": query_bundle.query_str,
            },
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-videodb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #0ed1dee4f93e4e75 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-videodb/llama_index/retrievers/videodb/base.py:32 
            api_key = os.environ.get("VIDEO_DB_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-you

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #5edc837444781cc5 — Environment-variable access.
repo/llama-index-integrations/retrievers/llama-index-retrievers-you/llama_index/retrievers/you/base.py:60 
        self._api_key = api_key or os.getenv("YDC_API_KEY") or ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

first-party (python): llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb

python first-party
expand_more 1 low-confidence finding(s)
low env_fs production #7fb723cb483141ac — Environment-variable access.
repo/llama-index-integrations/storage/kvstore/llama-index-storage-kvstore-dynamodb/llama_index/storage/kvstore/dynamodb/base.py:87 
        dynamodb_url = os.getenv("DYNAMODB_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

⚠ Higher-risk dependencies not analyzed

These higher-risk dependencies were not analyzed in this scan — treat the verdict as provisional. This is a scan-coverage limitation, not a detected data leak.

  • httpx http — scan budget exceeded
  • requests http — scan budget exceeded
  • aiohttp http — scan budget exceeded
  • azure-cosmos cloud — scan budget exceeded
  • azure-identity cloud — scan budget exceeded
  • azure-data-tables cloud — scan budget exceeded
  • google-cloud-firestore cloud — scan budget exceeded
  • google-cloud-aiplatform cloud — scan budget exceeded
  • anthropic ai — scan budget exceeded
  • azure-ai-inference cloud — scan budget exceeded
  • cohere ai — scan budget exceeded
  • opentelemetry-sdk analytics — scan budget exceeded
  • opentelemetry-api analytics — scan budget exceeded
  • opentelemetry-semantic-conventions analytics — scan budget exceeded
  • google-cloud-discoveryengine cloud — scan budget exceeded

Skipped dependencies

Production

  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-vertexai-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-superlinked prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-galaxia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-duckdb-retriever prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-kendra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-pathway prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-alletra-x10000 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/retrievers/llama-index-retrievers-bm25 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-honeyhive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-arize-phoenix prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-langfuse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-uptrain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-literalai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-argilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-promptlayer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-wandb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-opik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-agentops prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-aim prod — scan budget exceeded
  • first-party (python): llama-index-integrations/callbacks/llama-index-callbacks-openinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-airweave prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-exa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yahoo-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-text-to-image prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-bing-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jina prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-zapier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brightdata prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-python-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-cv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-moss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playgrounds prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vector-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-yelp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openapi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-dappier prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-aws-bedrock-agentcore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-brave-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-translate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp-discovery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-linkup-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-artifact-editor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-finance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-multion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-tavily-research prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-serpex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-measurespace prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-seltz prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-parallel-web-systems prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-requests prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-wolfram-alpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-waii prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-ionic-shopping prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-arxiv prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-neo4j prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-valyu prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-cogniswitch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-agentql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-speech prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-signnow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-typecast prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-vectara-query prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-playwright prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-jira-issue prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-mcp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-desearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-duckduckgo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-azure-code-interpreter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-metaphor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/tools/llama-index-tools-hive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/evaluation/llama-index-evaluation-tonic-validate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/response_synthesizers/llama-index-response-synthesizers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-guidance prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-evaporate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/program/llama-index-program-lmformatenforcer prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-gemini-live prod — scan budget exceeded
  • first-party (python): llama-index-integrations/voice_agents/llama-index-voice-agents-elevenlabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-entity prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-relik prod — scan budget exceeded
  • first-party (python): llama-index-integrations/extractors/llama-index-extractors-marvin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/selectors/llama-index-selectors-notdiamond prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-google-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-sagemaker-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-isaacus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-text-embeddings-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-langchain prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llamafile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-bedrock prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cohere prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mistralai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-anyscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-deepinfra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alephalpha prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-textembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ipex-llm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vllm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-openvino prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-inference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clarifai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openvino-genai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai-like prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-opea prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-azure-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex-endpoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-llm-rails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-modelscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-together prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-siliconflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-mixedbreadai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gaudi prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-gigachat prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fastembed prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-cloudflare-workersai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nomic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-fireworks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nebius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ollama prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-nvidia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-ibm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-zhipuai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-vertex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-litellm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-jinaai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-clip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-optimum-intel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-voyageai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-instructor prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-adapter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-heroku prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-baseten prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-huggingface-api prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-openai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-yandexgpt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oci-data-science prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-autoembeddings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-netmind prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-xinference prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/embeddings/llama-index-embeddings-premai/llama_index/embeddings/premai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-clickhouse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-openGauss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lindorm prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pgvecto-rs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-singlestoredb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tair prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-analyticdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oracledb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-kdbai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-yugabytedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hnswlib prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-oceanbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-volcenginemysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-databricks prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awsdocdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tablestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-redis prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-cassandra prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-relyt prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-ApertureDB prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vespa prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lantern prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurepostgresql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neo4jvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-gel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-alibabacloud-mysql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vectorx prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tencentvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-baiduvectordb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azureaisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-hologres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosnosql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-azurecosmosmongo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vertexaivectorsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-neptune prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-pinecone prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-db2 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-objectbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-bigquery prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-moorcheh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-vearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-supabase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-duckdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-nile prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-rocksetdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-postgres prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-docarray prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-tidbvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-dynamodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-lancedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-epsilla prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-typesense prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-timescalevector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-upstash prod — scan budget exceeded
  • first-party (python): llama-index-integrations/vector_stores/llama-index-vector-stores-mariadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-agentmesh prod — scan budget exceeded
  • first-party (python): llama-index-integrations/agent/llama-index-agent-azure prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oracleai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-arango-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azstorage-blob prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-singlestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hatena-blog prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kaltura prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-txtai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-steamship prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangadex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-solr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-linear prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-smart-pdf-loader prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-minio prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-macrometa-gdn prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-deeplake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-patentsview prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bilibili prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordpress prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-readwise prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-milvus prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mangoapps-guides prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashvector prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-discord prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-onedrive prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-guru prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-apify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-alibabacloud-aisearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-trello prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bagel prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-psychic prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opendal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-elasticsearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feishu-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-athena prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-maps prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-google prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jira prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-iceberg prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-faiss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-sec-filings prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docstring-walker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-database prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-awadb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-astra-db prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docugami prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whisper prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-snowflake prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wikipedia prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-wordlift prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dashscope prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-sharepoint prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-nougat-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-asana prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-rayyan prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-genius prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-screenpipe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-toggl prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-boarddocs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-memos prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-cdk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-notion prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-document360 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-service-now prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-openalex prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-metal prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-confluence prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-string-iterable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-opensearch prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-obsidian prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-datasets prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-llama-parse prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook-emails prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-github prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-box prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gcs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chatgpt-plugin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-youtube-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitbook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-docling prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-twitter prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-quip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mongodb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stackoverflow prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-typeform prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-azcognitive-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-semanticscholar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-whatsapp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-myscale prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-marker prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-spotify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-salesforce prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-assemblyai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-telegram prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote-depth prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-oxylabs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-igpt-email prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-stripe-docs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zyte-serp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-kibela prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pathway prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weather prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zep prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchdb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-layoutir prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pandas-ai prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gitlab prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-huggingface-fs prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-paddle-ocr prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-imdb-review prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-intercom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-make-com prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-legacy-office prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-slack prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphql prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-weaviate prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-file prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-remote prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firebase-realtimedb prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-feedly-rss prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mbox prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-jaguar prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-microsoft-outlook prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-zendesk-support prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-web prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hubspot prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-gong prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-s3 prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zendesk prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-firestore prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-chroma prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-markitdown prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-json prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-agent-search prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-shopify prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-gpt-repo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-dad-jokes prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-mondaydotcom prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-reddit prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-hwp prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-structured-data prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-preprocess prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-upstage prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-bitbucket prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-couchbase prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-qdrant prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-earnings-call-transcript prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-joplin prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pebblo prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-zulip prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-graphdb-cypher prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-lilac prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airtable prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-papers prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-pdf-table prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-airbyte-stripe prod — scan budget exceeded
  • first-party (python): llama-index-integrations/readers/llama-index-readers-uniprot prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-azure prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-huggingface prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-qianfan prod — scan budget exceeded
  • first-party (python): llama-index-utils/llama-index-utils-oracleai prod — scan budget exceeded
  • first-party (python): docs/api_reference prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/storage/subcat/pkg2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-integrations/vector_stores/pkg1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack2 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-packs/pack1 prod — scan budget exceeded
  • first-party (python): llama-dev/tests/data/llama-index-utils/util prod — scan budget exceeded
  • httpx prod — scan budget exceeded
  • requests prod — scan budget exceeded
  • aiohttp prod — scan budget exceeded
  • azure-cosmos prod — scan budget exceeded
  • azure-identity prod — scan budget exceeded
  • azure-data-tables prod — scan budget exceeded
  • google-cloud-firestore prod — scan budget exceeded
  • google-cloud-aiplatform prod — scan budget exceeded
  • anthropic prod — scan budget exceeded
  • azure-ai-inference prod — scan budget exceeded
  • cohere prod — scan budget exceeded
  • opentelemetry-sdk prod — scan budget exceeded
  • opentelemetry-api prod — scan budget exceeded
  • opentelemetry-semantic-conventions prod — scan budget exceeded
  • google-cloud-discoveryengine prod — scan budget exceeded
  • llama-index-core prod — scan budget exceeded
  • llama-index-embeddings-openai prod — scan budget exceeded
  • llama-index-llms-openai prod — scan budget exceeded
  • nltk prod — scan budget exceeded
  • SQLAlchemy prod — scan budget exceeded
  • dataclasses-json prod — scan budget exceeded
  • deprecated prod — scan budget exceeded
  • fsspec prod — scan budget exceeded
  • nest-asyncio prod — scan budget exceeded
  • numpy prod — scan budget exceeded
  • tenacity prod — scan budget exceeded
  • tiktoken prod — scan budget exceeded
  • typing-extensions prod — scan budget exceeded
  • typing-inspect prod — scan budget exceeded
  • networkx prod — scan budget exceeded
  • dirtyjson prod — scan budget exceeded
  • tqdm prod — scan budget exceeded
  • pillow prod — scan budget exceeded
  • PyYAML prod — scan budget exceeded
  • wrapt prod — scan budget exceeded
  • pydantic prod — scan budget exceeded
  • filetype prod — scan budget exceeded
  • eval-type-backport prod — scan budget exceeded
  • banks prod — scan budget exceeded
  • aiosqlite prod — scan budget exceeded
  • llama-index-workflows prod — scan budget exceeded
  • setuptools prod — scan budget exceeded
  • platformdirs prod — scan budget exceeded
  • tinytag prod — scan budget exceeded
  • click prod — scan budget exceeded
  • packaging prod — scan budget exceeded
  • rich prod — scan budget exceeded
  • nebula3-python prod — scan budget exceeded
  • tidb-vector prod — scan budget exceeded
  • PyMySQL prod — scan budget exceeded
  • falkordb prod — scan budget exceeded
  • neo4j prod — scan budget exceeded
  • aperturedb prod — scan budget exceeded
  • ray prod — scan budget exceeded
  • llama-index-storage-kvstore-dynamodb prod — scan budget exceeded
  • llama-index-storage-kvstore-tablestore prod — scan budget exceeded
  • llama-index-storage-kvstore-mongodb prod — scan budget exceeded
  • llama-index-storage-kvstore-elasticsearch prod — scan budget exceeded
  • llama-index-storage-kvstore-duckdb prod — scan budget exceeded
  • llama-index-kvstore-couchbase prod — scan budget exceeded
  • llama-index-storage-kvstore-azure prod — scan budget exceeded
  • llama-index-storage-kv-store-azurecosmosnosql prod — scan budget exceeded
  • llama-index-storage-kvstore-firestore prod — scan budget exceeded
  • llama-index-storage-kvstore-redis prod — scan budget exceeded
  • llama-index-storage-kvstore-postgres prod — scan budget exceeded
  • llama-index-storage-kvstore-gel prod — scan budget exceeded
  • redis prod — scan budget exceeded
  • llama-index-utils-azure prod — scan budget exceeded
  • upstash_redis prod — scan budget exceeded
  • opensearch-py prod — scan budget exceeded
  • pymongo prod — scan budget exceeded
  • gel prod — scan budget exceeded
  • jinja2 prod — scan budget exceeded
  • psycopg2-yugabytedb prod — scan budget exceeded
  • sqlalchemy-yugabytedb prod — scan budget exceeded
  • aioboto3 prod — scan budget exceeded
  • boto3-stubs prod — scan budget exceeded
  • asyncpg prod — scan budget exceeded
  • psycopg prod — scan budget exceeded
  • tablestore prod — scan budget exceeded
  • duckdb prod — scan budget exceeded
  • llama-index-vector-stores-duckdb prod — scan budget exceeded
  • pyarrow prod — scan budget exceeded
  • elasticsearch prod — scan budget exceeded
  • couchbase prod — scan budget exceeded
  • psycopg2-binary prod — scan budget exceeded
  • ag-ui-protocol prod — scan budget exceeded
  • fastapi prod — scan budget exceeded
  • guidance prod — scan budget exceeded
  • llama-index-program-guidance prod — scan budget exceeded
  • mem0ai prod — scan budget exceeded
  • guardrails-ai prod — scan budget exceeded
  • llama-index-llms-openai-like prod — scan budget exceeded
  • transformers prod — scan budget exceeded
  • modelscope prod — scan budget exceeded
  • torch prod — scan budget exceeded
  • sentencepiece prod — scan budget exceeded
  • ms-swift prod — scan budget exceeded
  • pip prod — scan budget exceeded
  • octoai prod — scan budget exceeded
  • gigachat prod — scan budget exceeded
  • litellm prod — scan budget exceeded
  • mistralai prod — scan budget exceeded
  • pyjwt prod — scan budget exceeded
  • cryptography prod — scan budget exceeded
  • ibm-watsonx-ai prod — scan budget exceeded
  • reka-api prod — scan budget exceeded
  • mlx-lm prod — scan budget exceeded
  • mlx prod — scan budget exceeded
  • llama-index-llms-llama-cpp prod — scan budget exceeded
  • langchain prod — scan budget exceeded
  • llama-index-llms-huggingface prod — scan budget exceeded
  • optimum prod — scan budget exceeded
  • aleph-alpha-client prod — scan budget exceeded
  • ai21 prod — scan budget exceeded
  • llama-index-llms-anthropic prod — scan budget exceeded
  • portkey-ai prod — scan budget exceeded
  • portkey prod — scan budget exceeded
  • openvino-genai prod — scan budget exceeded
  • huggingface-hub prod — scan budget exceeded
  • dashscope prod — scan budget exceeded
  • oci prod — scan budget exceeded
  • google-genai prod — scan budget exceeded
  • premai prod — scan budget exceeded
  • google-generativeai prod — scan budget exceeded
  • sseclient-py prod — scan budget exceeded
  • cleanlab-tlm prod — scan budget exceeded
  • llama-index-utils-qianfan prod — scan budget exceeded
  • llama-cpp-python prod — scan budget exceeded
  • friendli-client prod — scan budget exceeded
  • ipex-llm prod — scan budget exceeded
  • bigdl-core-xe-21 prod — scan budget exceeded
  • bigdl-core-xe-addons-21 prod — scan budget exceeded
  • bigdl-core-xe-batch-21 prod — scan budget exceeded
  • dpcpp-cpp-rt prod — scan budget exceeded
  • intel_extension_for_pytorch prod — scan budget exceeded
  • mkl-dpcpp prod — scan budget exceeded
  • onednn prod — scan budget exceeded
  • torchvision prod — scan budget exceeded
  • clarifai prod — scan budget exceeded
  • contextual-client prod — scan budget exceeded
  • python-dotenv prod — scan budget exceeded
  • ollama prod — scan budget exceeded
  • tokenizers prod — scan budget exceeded
  • llama-index-readers-upstage prod — scan budget exceeded
  • alibabacloud-searchplat20240529 prod — scan budget exceeded
  • tritonclient prod — scan budget exceeded
  • konko prod — scan budget exceeded
  • zhipuai prod — scan budget exceeded
  • sniffio prod — scan budget exceeded
  • termcolor prod — scan budget exceeded
  • llama-index-instrumentation prod — scan budget exceeded
  • fastembed prod — scan budget exceeded
  • voyageai prod — scan budget exceeded
  • llmlingua prod — scan budget exceeded
  • aimon prod — scan budget exceeded
  • colpali-engine prod — scan budget exceeded
  • presidio-analyzer prod — scan budget exceeded
  • presidio-anonymizer prod — scan budget exceeded
  • rank-llm prod — scan budget exceeded
  • mixedbread prod — scan budget exceeded
  • pinecone prod — scan budget exceeded
  • flashrank prod — scan budget exceeded
  • docling-core prod — scan budget exceeded
  • chonkie prod — scan budget exceeded
  • llama-index-vector-stores-google prod — scan budget exceeded
  • llama-index-response-synthesizers-google prod — scan budget exceeded
  • lancedb prod — scan budget exceeded
  • pylance prod — scan budget exceeded
  • tantivy prod — scan budget exceeded
  • polars prod — scan budget exceeded
  • open-clip-torch prod — scan budget exceeded
  • llama-index-embeddings-dashscope prod — scan budget exceeded
  • llama-index-readers-dashscope prod — scan budget exceeded
  • llama-index-node-parser-dashscope prod — scan budget exceeded
  • pgml prod — scan budget exceeded
  • peft prod — scan budget exceeded
  • flagembedding prod — scan budget exceeded
  • cognee prod — scan budget exceeded
  • graphistry prod — scan budget exceeded
  • videodb prod — scan budget exceeded
  • vectorize-client prod — scan budget exceeded
  • google-auth-httplib2 prod — scan budget exceeded
  • google-auth-oauthlib prod — scan budget exceeded
  • superlinked prod — scan budget exceeded
  • pydi-client prod — scan budget exceeded
  • bm25s prod — scan budget exceeded
  • pystemmer prod — scan budget exceeded
  • honeyhive prod — scan budget exceeded
  • openinference-instrumentation-llama-index prod — scan budget exceeded
  • langfuse prod — scan budget exceeded
  • uptrain prod — scan budget exceeded
  • argilla prod — scan budget exceeded
  • argilla-llama-index prod — scan budget exceeded
  • promptlayer prod — scan budget exceeded
  • wandb prod — scan budget exceeded
  • agentops prod — scan budget exceeded
  • aim prod — scan budget exceeded
  • jwt prod — scan budget exceeded
  • airweave-sdk prod — scan budget exceeded