Close Open Privacy Scan

link https://github.com/korotovsky/slack-mcp-server

bolt Snapshot: commit b88c0de

science engine v1.22

schedule 2026-07-22T10:08:14.875673+00:00

smart_toy MCP server detected: github.com/mark3labs/mcp-go — detected in dependencies, not a safety judgment.

App Privacy Score

97 /100

Low privacy risk

Low risk · 360 finding(s)

Dependency score: 22 (High risk)

bar_chart Score Breakdown

env_fs −3

list Scan Summary

0 high 130 medium 230 low

First-party packages: 1

Dependency packages: 11

Ecosystem: go

swap_horiz Application data flows

No application data flows were found. See dependency data flows below.

hub Dependency data flows (130)

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:15 → pkgs/go/[email protected]/examples/buttons/buttons.go:51

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:15 → pkgs/go/[email protected]/examples/buttons/buttons.go:53

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:41

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:42

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:47

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:50

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:53

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:13 → pkgs/go/[email protected]/examples/connparams/connparams.go:56

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:24

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:28

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:26

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:30

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:47

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:61

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:66

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:77

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:80

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:88

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:93

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:114

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:33

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:34

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:39

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:42

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:45

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:48

medium github.com/rusq/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:12 → pkgs/go/[email protected]/examples/websocket/websocket.go:51

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:54

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:56

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:62

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:63

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:64

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:67

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:70

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:73

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:75

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:77

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:79

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:81

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:83

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:88

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:25 → pkgs/go/[email protected]/examples/audit/audit.go:91

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:18 → pkgs/go/[email protected]/examples/buttons/buttons.go:55

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:18 → pkgs/go/[email protected]/examples/buttons/buttons.go:58

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:64

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:65

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:70

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:73

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:76

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:20 → pkgs/go/[email protected]/examples/connparams/connparams.go:79

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:36

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:41

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:43

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:24

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:34

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:37

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:39

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:11 → pkgs/go/[email protected]/examples/conversations/conversations.go:40

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:12 → pkgs/go/[email protected]/examples/files/files.go:30

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:12 → pkgs/go/[email protected]/examples/files/files.go:33

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:12 → pkgs/go/[email protected]/examples/files/files.go:37

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:12 → pkgs/go/[email protected]/examples/files/files.go:40

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:47

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:54

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:62

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:77

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:81

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → pkgs/go/[email protected]/examples/files_remote/files_remote.go:27

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → pkgs/go/[email protected]/examples/files_remote/files_remote.go:30

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → pkgs/go/[email protected]/examples/files_remote/files_remote.go:34

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → pkgs/go/[email protected]/examples/files_remote/files_remote.go:37

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:39

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:43

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:14 → pkgs/go/[email protected]/examples/function/function.go:60

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/messages/messages.go:16 → pkgs/go/[email protected]/examples/messages/messages.go:50

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/messages/messages.go:16 → pkgs/go/[email protected]/examples/messages/messages.go:53

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/modal/modal.go:92 → pkgs/go/[email protected]/examples/modal/modal.go:100

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/modal/modal.go:92 → pkgs/go/[email protected]/examples/modal/modal.go:114

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pagination/pagination.go:53 → pkgs/go/[email protected]/examples/pagination/pagination.go:66

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:35

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:62

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:72

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:78

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:83

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:92

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:99

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:103

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:105

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:111

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:17 → pkgs/go/[email protected]/examples/pins/pins.go:116

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:33

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:41

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:46

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:53

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:57

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:63

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:70

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:74

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:76

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:85

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:87

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:92

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:94

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:96

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:103

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:110

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:114

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:17 → pkgs/go/[email protected]/examples/reactions/reactions.go:116

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:62

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:67

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:78

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:81

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:89

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:94

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → pkgs/go/[email protected]/examples/socketmode/socketmode.go:115

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:16 → pkgs/go/[email protected]/examples/team/team.go:28

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:16 → pkgs/go/[email protected]/examples/team/team.go:31

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:16 → pkgs/go/[email protected]/examples/team/team.go:36

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:16 → pkgs/go/[email protected]/examples/team/team.go:40

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/users/users.go:16 → pkgs/go/[email protected]/examples/users/users.go:31

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/users/users.go:16 → pkgs/go/[email protected]/examples/users/users.go:34

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:44

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:45

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:50

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:53

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:56

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:59

medium github.com/slack-go/slack tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:17 → pkgs/go/[email protected]/examples/websocket/websocket.go:62

medium github.com/mark3labs/mcp-go tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/oauth_client/main.go:31 → pkgs/go/[email protected]/examples/oauth_client/main.go:89

medium github.com/mark3labs/mcp-go tooling PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/oauth_client/main.go:31 → pkgs/go/[email protected]/examples/oauth_client/main.go:102

</> First-Party Code

first-party (go)

go first-party

expand_more 62 low-confidence finding(s)

low env_fs production #7d34506990fea888 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:35

		enabledToolsFlag = os.Getenv("SLACK_MCP_ENABLED_TOOLS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6d33b14683046f1 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:54

	addMessageToolEnv := os.Getenv("SLACK_MCP_ADD_MESSAGE_TOOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #20238f3fd5693687 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:106

		host := os.Getenv("SLACK_MCP_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9afa5e27bec27196 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:110

		port := os.Getenv("SLACK_MCP_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ce7d922900f70d25 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:136

		host := os.Getenv("SLACK_MCP_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d89b73e17f5e4ee0 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:140

		port := os.Getenv("SLACK_MCP_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #256505b897da6658 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:180

		if os.Getenv("SLACK_MCP_XOXP_TOKEN") == "demo" || (os.Getenv("SLACK_MCP_XOXC_TOKEN") == "demo" && os.Getenv("SLACK_MCP_XOXD_TOKEN") == "demo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9b61611e2f30b1af — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:212

		if os.Getenv("SLACK_MCP_XOXP_TOKEN") == "demo" || (os.Getenv("SLACK_MCP_XOXC_TOKEN") == "demo" && os.Getenv("SLACK_MCP_XOXD_TOKEN") == "demo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2989e6f919ae80e0 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:268

	if envLevel := os.Getenv("SLACK_MCP_LOG_LEVEL"); envLevel != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d09108868b08e29 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:335

	if format := os.Getenv("SLACK_MCP_LOG_FORMAT"); format != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e944d66c4348851c — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:339

	if env := os.Getenv("ENVIRONMENT"); env != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2415d51a495e144b — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:348

	if os.Getenv("KUBERNETES_SERVICE_HOST") != "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e6ed6f5d0213ed2c — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:349

		os.Getenv("DOCKER_CONTAINER") != "" ||

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7f0986fcde8a6cdd — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:350

		os.Getenv("container") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #caaaaeebe39d073c — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:362

	if colorEnv := os.Getenv("SLACK_MCP_LOG_COLOR"); colorEnv != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d3414bbef705e5e6 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:366

	if os.Getenv("NO_COLOR") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d5221bb802838532 — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:370

	if os.Getenv("FORCE_COLOR") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1758dd972d4e44cf — Environment-variable access.

repo/cmd/slack-mcp-server/main.go:374

	if env := os.Getenv("ENVIRONMENT"); env == "development" || env == "dev" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8a46ce1924256b88 — Environment-variable access.

repo/pkg/handler/conversations.go:253

	unfurlOpt := os.Getenv("SLACK_MCP_ADD_MESSAGE_UNFURLING")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #63196b97bc255c40 — Environment-variable access.

repo/pkg/handler/conversations.go:272

	toolConfig := os.Getenv("SLACK_MCP_ADD_MESSAGE_MARK")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b9ca1012092a3751 — Environment-variable access.

repo/pkg/handler/conversations.go:1486

	return isChannelAllowedForConfig(channel, os.Getenv("SLACK_MCP_ADD_MESSAGE_TOOL"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #499c2efd5d006fe6 — Environment-variable access.

repo/pkg/handler/conversations.go:1749

	toolConfig := os.Getenv("SLACK_MCP_ADD_MESSAGE_TOOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #58e7d9d35aa3b016 — Environment-variable access.

repo/pkg/handler/conversations.go:1750

	enabledTools := os.Getenv("SLACK_MCP_ENABLED_TOOLS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ac0a00eb7f66fe2 — Environment-variable access.

repo/pkg/handler/conversations.go:1845

	toolConfig := os.Getenv("SLACK_MCP_REACTION_TOOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4319c47e616bae28 — Environment-variable access.

repo/pkg/handler/conversations.go:1846

	enabledTools := os.Getenv("SLACK_MCP_ENABLED_TOOLS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #71cdfdb1f3a71a7a — Environment-variable access.

repo/pkg/handler/conversations.go:1893

	toolConfig := os.Getenv("SLACK_MCP_ATTACHMENT_TOOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01eecdf78cb0299f — Environment-variable access.

repo/pkg/handler/conversations.go:1894

	enabledTools := os.Getenv("SLACK_MCP_ENABLED_TOOLS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #dfc99f0d87122647 — Environment-variable access.

repo/pkg/handler/conversations.go:1953

	toolConfig := os.Getenv("SLACK_MCP_MARK_TOOL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a1feff9c8139f12d — Environment-variable access.

repo/pkg/provider/api.go:93

	ttlStr := os.Getenv("SLACK_MCP_CACHE_TTL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a229068d33e10d4b — Environment-variable access.

repo/pkg/provider/api.go:122

	intervalStr := os.Getenv("SLACK_MCP_MIN_REFRESH_INTERVAL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #710d5c744883a493 — Environment-variable access.

repo/pkg/provider/api.go:151

	xoxpToken := os.Getenv("SLACK_MCP_XOXP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #593b6440d767238a — Environment-variable access.

repo/pkg/provider/api.go:152

	xoxcToken := os.Getenv("SLACK_MCP_XOXC_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5a60a8dd6ab1f7bc — Environment-variable access.

repo/pkg/provider/api.go:153

	xoxdToken := os.Getenv("SLACK_MCP_XOXD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b47a4a7c8cd082e4 — Environment-variable access.

repo/pkg/provider/api.go:160

	if os.Getenv("SLACK_MCP_GOVSLACK") == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a9286d161288989 — Environment-variable access.

repo/pkg/provider/api.go:308

	if os.Getenv("SLACK_MCP_GOVSLACK") == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7b7df5782214ce37 — Environment-variable access.

repo/pkg/provider/api.go:363

	if os.Getenv("SLACK_MCP_XOXP_TOKEN") == "demo" || (os.Getenv("SLACK_MCP_XOXC_TOKEN") == "demo" && os.Getenv("SLACK_MCP_XOXD_TOKEN") == "demo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #43c9650a2dc7846a — Environment-variable access.

repo/pkg/provider/api.go:640

	xoxpToken := os.Getenv("SLACK_MCP_XOXP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8f2241c7db615789 — Environment-variable access.

repo/pkg/provider/api.go:641

	xoxbToken := os.Getenv("SLACK_MCP_XOXB_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8b1739c7020573e0 — Environment-variable access.

repo/pkg/provider/api.go:642

	xoxcToken := os.Getenv("SLACK_MCP_XOXC_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7c70df918d7bf4f6 — Environment-variable access.

repo/pkg/provider/api.go:643

	xoxdToken := os.Getenv("SLACK_MCP_XOXD_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2637fe26123cc27f — Environment-variable access.

repo/pkg/provider/api.go:704

	usersCache := os.Getenv("SLACK_MCP_USERS_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #eb017096c3eff322 — Environment-variable access.

repo/pkg/provider/api.go:709

	channelsCache := os.Getenv("SLACK_MCP_CHANNELS_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f32a22c1834dbaeb — Environment-variable access.

repo/pkg/provider/api.go:714

	if os.Getenv("SLACK_MCP_XOXP_TOKEN") == "demo" || (os.Getenv("SLACK_MCP_XOXC_TOKEN") == "demo" && os.Getenv("SLACK_MCP_XOXD_TOKEN") == "demo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #609b18d6ff6ce9ac — Environment-variable access.

repo/pkg/provider/api.go:764

	usersCache := os.Getenv("SLACK_MCP_USERS_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #617a89e85cd2a3fd — Environment-variable access.

repo/pkg/provider/api.go:769

	channelsCache := os.Getenv("SLACK_MCP_CHANNELS_CACHE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a18d68cfe09f7ca1 — Environment-variable access.

repo/pkg/provider/api.go:774

	if os.Getenv("SLACK_MCP_XOXP_TOKEN") == "demo" || (os.Getenv("SLACK_MCP_XOXC_TOKEN") == "demo" && os.Getenv("SLACK_MCP_XOXD_TOKEN") == "demo") {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddf8aa76f0a12abb — Filesystem access.

repo/pkg/provider/api.go:879

		if data, err := os.ReadFile(ap.usersCachePath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a554569dd737d3cc — Filesystem access.

repo/pkg/provider/api.go:1075

		if data, err := os.ReadFile(ap.channelsCachePath); err == nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #020c9b0cd9e03cdb — Environment-variable access.

repo/pkg/provider/edge/edge.go:70

	if os.Getenv("SLACK_MCP_GOVSLACK") == "true" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c2a009bacb8d1409 — Filesystem access.

repo/pkg/provider/edge/edge.go:83

	tape, err := os.Create("tape.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5e1b32940621466d — Environment-variable access.

repo/pkg/server/auth/sse_auth.go:27

	keyA := os.Getenv("SLACK_MCP_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #14cbbfc82467cb28 — Environment-variable access.

repo/pkg/server/auth/sse_auth.go:29

		keyA = os.Getenv("SLACK_MCP_SSE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17e39299f577965a — Environment-variable access.

repo/pkg/server/server.go:110

		return os.Getenv(envVarName) != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #bd802c816812100d — Environment-variable access.

repo/pkg/transport/transport.go:338

	if os.Getenv("SLACK_MCP_PROXY") != "" && os.Getenv("SLACK_MCP_CUSTOM_TLS") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6db2a0dbcf22422f — Environment-variable access.

repo/pkg/transport/transport.go:344

	if proxyURL := os.Getenv("SLACK_MCP_PROXY"); proxyURL != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4f12dbdbec76ca3c — Environment-variable access.

repo/pkg/transport/transport.go:359

	if isToolkit := os.Getenv("SLACK_MCP_SERVER_CA_TOOLKIT"); isToolkit != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a87045fbcc0641c8 — Environment-variable access.

repo/pkg/transport/transport.go:365

	if localCertFile := os.Getenv("SLACK_MCP_SERVER_CA"); localCertFile != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2ddf964f1acbd1f8 — Filesystem access.

repo/pkg/transport/transport.go:366

		certs, err := ioutil.ReadFile(localCertFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e64624241eab778 — Environment-variable access.

repo/pkg/transport/transport.go:378

	if os.Getenv("SLACK_MCP_SERVER_CA_INSECURE") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e69b7cc8ef7c612c — Environment-variable access.

repo/pkg/transport/transport.go:379

		if localCertFile := os.Getenv("SLACK_MCP_SERVER_CA"); localCertFile != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8c22d330005f50e6 — Environment-variable access.

repo/pkg/transport/transport.go:386

	if ua := os.Getenv("SLACK_MCP_USER_AGENT"); ua != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7fbfb8d63fc6a47f — Environment-variable access.

repo/pkg/transport/transport.go:392

	if useCustomTLS := os.Getenv("SLACK_MCP_CUSTOM_TLS"); useCustomTLS != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

github.com/slack-go/slack

go dependency

medium pii_flow tooling Excluded from app score unknown #a7c9a3b279ef8995 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:54 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:54

	fmt.Printf("Found %d audit log entries (limited to 10)\n", len(entries))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #05ab5b32f41db818 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:56 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:56

		fmt.Printf("More entries available (cursor: %s)\n", nextCursor)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #304ea01c7a84b0d7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:62 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:62

		fmt.Printf("Entry %d: %s\n", i+1, entry.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ca4fe08843e05864 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:63 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:63

		fmt.Printf("  Action: %s\n", entry.Action)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #70ce8a468602a9f7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:64 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:64

		fmt.Printf("  Date:   %s\n", time.Unix(int64(entry.DateCreate), 0).Format(time.RFC3339))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #169f78c283b73e5a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:67 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:67

		fmt.Printf("  Actor:  %s (%s)\n", entry.Actor.User.Name, entry.Actor.User.Email)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e2ac5eaa6db50b0f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:70 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:70

		fmt.Printf("  Entity Type: %s\n", entry.Entity.Type)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8d73b32ab37b7ce0 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:73 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:73

			fmt.Printf("  Entity: %s (%s)\n", entry.Entity.User.Name, entry.Entity.User.Email)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3a84464ab0b477a5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:75 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:75

			fmt.Printf("  Entity: #%s (%s)\n", entry.Entity.Channel.Name, entry.Entity.Channel.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #98a4b5cecfce3d6d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:77 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:77

			fmt.Printf("  Entity: %s (%s)\n", entry.Entity.File.Name, entry.Entity.File.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f1b8224606f2ca3d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:79 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:79

			fmt.Printf("  Entity: %s (%s)\n", entry.Entity.App.Name, entry.Entity.App.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c7a6c7619b650b51 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:81 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:81

			fmt.Printf("  Entity: %s (%s)\n", entry.Entity.Workspace.Name, entry.Entity.Workspace.Domain)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5f5e93d88181e347 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:83 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:83

			fmt.Printf("  Entity: %s (%s)\n", entry.Entity.Enterprise.Name, entry.Entity.Enterprise.Domain)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #0b2eb32802aadaad — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:88 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:88

			fmt.Printf("  Location: %s (%s)\n", entry.Context.Location.Name, entry.Context.Location.Type)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f6b5a70728b30602 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/audit/audit.go:91 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:25 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/audit/audit.go:91

			fmt.Printf("  IP Address: %s\n", entry.Context.IPAddress)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #51234f29c4047e3c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:55 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:18 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:55

		fmt.Printf("Could not send message: %v\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #96b0ddab0a43a9ea — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:58 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:18 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:58

	fmt.Printf("Message with buttons successfully sent to channel %s at %s", respChannelID, timestamp)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #d32e3c4a56868fe5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:64 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:64

			fmt.Println("Infos:", ev.Info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #86e621c3da2eb65e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:65 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:65

			fmt.Println("Connection counter:", ev.ConnectionCount)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #d19c85e1095b0718 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:70 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:70

			fmt.Printf("Message: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3f2ae5661438c858 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:73 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:73

			fmt.Printf("Presence Change: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ecc03e13c68abbd7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:76 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:76

			fmt.Printf("Current latency: %v\n", ev.Value)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f922b4dec9060990 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:79 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:20 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:79

			fmt.Printf("Error: %s\n", ev.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e1b46eee49891a33 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:36 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:36

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #24c9acfcc1da120c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:41 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:41

			fmt.Printf("Message: %s\n", message.Attachments[0].Color)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #fb651f1cbbfc58b5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:43 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:43

			fmt.Printf("Message: %s\n", message.Text)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #75b73b7af47ae0af — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:24 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:24

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #2cbb34818ec9c6fd — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:34 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:34

			fmt.Printf("Error getting info for channel %s: %s\n", channel.ID, err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f178702de5d5793c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:37 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:37

		fmt.Printf("Channel: %s\n", channel.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #a53edcfcbd5c9d02 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:39 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:39

			fmt.Printf("Canvas: %+v\n", info.Properties.Canvas)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5015ec0595242e44 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:40 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:40

			fmt.Printf("Tabs: %+v\n", info.Properties.Tabs)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e485c8bdfd8f67e7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:30 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:30

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8ea020fd7244e4f6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:33 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:33

	fmt.Printf("ID: %s, title: %s\n", file.ID, file.Title)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #33a1485f8da69478 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:37 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:37

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8766535a024013f9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/files.go:40 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/files.go:40

	fmt.Printf("File %s deleted successfully.\n", file.ID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #469b337edccb3dd4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:47 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:47

			fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c3941b20b7051813 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:54 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:54

		fmt.Printf("Uploading file %s to %s\n", file.Filename, uploads[i].UploadURL)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #cad28e3a9f0ea761 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:62 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:62

			fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #802e7499c4588bde — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:77 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:77

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #a99141ccb07285d8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:81 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:81

	fmt.Printf("Files uploaded successfully: %+v\n", c.Files)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #db19b9690c341069 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:27 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:27

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4baec704f8bd1400 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:30 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:30

	fmt.Printf("Name: %s, URL: %s\n", file.Name, file.URLPrivate)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #9ba5da81a6f43d4c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:34 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:34

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #aade2f80eedd3744 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:37 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/files_remote/files_remote.go:37

	fmt.Printf("File %s deleted successfully.\n", file.Name)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #98e6d6273d84b1a3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:39 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:39

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #9de219044c3812a6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:43 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:43

				fmt.Printf("Event received: %+v\n", eventsAPIEvent)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #756caa6c37eb047f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:60 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:60

								fmt.Printf("failed posting message: %v \n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6388d88a26db8009 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/messages/messages.go:50 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/messages/messages.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/messages/messages.go:50

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #0b33e7ac8487a352 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/messages/messages.go:53 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/messages/messages.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/messages/messages.go:53

	fmt.Printf("Message successfully sent to channel %s at %s", respChannelID, timestamp)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f5341439c4f7ba8e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/modal/modal.go:100 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/modal/modal.go:92 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/modal/modal.go:100

		fmt.Println(err.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #afa8aecbfceb97ad — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/modal/modal.go:114 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/modal/modal.go:92 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/modal/modal.go:114

		fmt.Println(err.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #59e1356e7551e79a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pagination/pagination.go:66 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pagination/pagination.go:53 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pagination/pagination.go:66

	fmt.Printf("Collected %d UIDs\n", len(uids))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #7a5cc415e4cbc308 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:35 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:35

		fmt.Printf("Error getting channels: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e54bd0d95c9eef57 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:62 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:62

							fmt.Printf("Could not unarchive %s: %s\n", archivedChannel.ID, err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #fddf6b15cf7f0c3c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:72 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:72

			fmt.Printf("Error setting test channel for pinning: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #49a68533b2bd5107 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:78 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:78

	fmt.Printf("Posting as %s (%s) in channel %s\n", postAsUserName, postAsUserID, postToChannelID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #0a82c799c31f1690 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:83 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:83

		fmt.Printf("Error posting message: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5e35c17fbf9eb94b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:92 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:92

		fmt.Printf("Error adding pin: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #cc7c82c9b63c99e7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:99 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:99

		fmt.Printf("Error listing pins: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #60f95330e086344f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:103 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:103

	fmt.Printf("All pins by %s...\n", authTest.User)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #2ddedaa6e7633441 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:105 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:105

		fmt.Printf(" > Item type: %s\n", item.Type)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ca8d3ac1c5166a44 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:111 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:111

		fmt.Printf("Error remove pin: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6ff0c5bf9b40763e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/pins/pins.go:116 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/pins/pins.go:116

		fmt.Printf("Error archiving channel: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f4ad7b7d565b182f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:33 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:33

		fmt.Printf("Error getting channels: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c4f29ac6b81e9baf — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:41 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:41

	fmt.Printf("Posting as %s (%s) in channel %s\n", postAsUserName, postAsUserID, *channelID)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #847f05839091dad6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:46 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:46

		fmt.Printf("Error posting message: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #1d64577e40561e84 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:53 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:53

	fmt.Printf("Adding reaction to message with reference %v\n", msgRef)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #638cbc002b71148b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:57 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:57

		fmt.Printf("Error adding reaction: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6b5d4f1c41270fcf — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:63 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:63

		fmt.Printf("Error adding reaction: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #aea86a54dc09f88f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:70 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:70

		fmt.Printf("Error getting reactions: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #dd1983da06ad2167 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:74 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:74

	fmt.Printf("%d reactions to message...\n", len(msgReactionsResp.Reactions))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #843e90836dd2e575 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:76 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:76

		fmt.Printf("  %d users say %s in channel %s\n", r.Count, r.Name, msgReactionsResp.Item.Channel)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #807a05b9026ad72d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:85 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:85

		fmt.Printf("Error listing reactions: %v\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6f1f5c6fc7999766 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:87 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:87

			fmt.Printf("  ResponseMetadata.Messages: %v\n", slackErr.ResponseMetadata.Messages)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #781a11f7023ac733 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:92 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:92

	fmt.Printf("All reactions by %s...\n", authTest.User)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #483102e6dccc7187 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:94 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:94

		fmt.Printf("%d on a %s...\n", len(item.Reactions), item.Type)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #9cf2548af571140a — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:96 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:96

			fmt.Printf("  %s (along with %d others)\n", r.Name, r.Count-1)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #23034b3ebbeff8f9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:103 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:103

		fmt.Printf("Error remove reaction: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #a1e3a3b9c3a143d2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:110 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:110

		fmt.Printf("Error getting reactions: %s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ec8a960a8423b2a3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:114 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:114

	fmt.Printf("%d reactions to message after removing cry...\n", len(msgReactionsResp.Reactions))

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #14b821664ab8e337 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/reactions/reactions.go:116 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/reactions/reactions.go:116

		fmt.Printf("  %d users say %s\n", r.Count, r.Name)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #1c522e5c43105474 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:62 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:62

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #579db8fe898ff3df — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:67 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:67

				fmt.Printf("Event received: %+v\n", eventsAPIEvent)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4464eb78c28f3ed7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:78 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:78

							fmt.Printf("failed posting message: %v", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #92e3f8273c99cd9c — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:81 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:81

						fmt.Printf("user %q joined to channel %q", ev.User, ev.Channel)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ac27c21d55a53eec — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:89 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:89

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #8bd11f922838389d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:94 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:94

				fmt.Printf("Interaction received: %+v\n", callback)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4010015a1bec640f — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:115 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:115

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #195c31cf5715cbc8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:28 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:28

			fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f97612357a261215 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:31 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:31

		fmt.Printf("ID: %s, BillingActive: %v\n\n\n", *userID, billingActive[*userID])

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #584edbcab47e9351 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:36 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:36

			fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #abd75cb7f477fd91 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/team/team.go:40 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/team/team.go:40

			fmt.Printf("ID: %v, BillingActive: %v\n", id, value)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #7b3f672fbc74ef5d — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/users/users.go:31 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/users/users.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/users/users.go:31

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #1c284d3715eb57cc — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/users/users.go:34 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/users/users.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/users/users.go:34

	fmt.Printf("ID: %s, Fullname: %s, Email: %s\n", user.ID, user.Profile.RealName, user.Profile.Email)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #07257d9452b0cb5b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:44 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:44

			fmt.Println("Infos:", ev.Info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #b6164d05811add49 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:45 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:45

			fmt.Println("Connection counter:", ev.ConnectionCount)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3473d90c54dd3462 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:50 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:50

			fmt.Printf("Message: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #7c577cae95023d15 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:53 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:53

			fmt.Printf("Presence Change: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #0bd79949be1041df — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:56 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:56

			fmt.Printf("Current latency: %v\n", ev.Value)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #23bfceca34539fee — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:59 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:59

			fmt.Printf("Desktop Notification: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e44d84063b2ebde5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:62 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:17 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:62

			fmt.Printf("Error: %s\n", ev.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 38 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #9fdebd44ebdcbde3 — Environment-variable access.

pkgs/go/[email protected]/examples/admin_conversations/admin_conversations.go:32

	token := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9aec36c54e2eb51c — Environment-variable access.

pkgs/go/[email protected]/examples/admin_conversations/admin_conversations.go:39

	teamID = os.Getenv("SLACK_TEAM_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #97e677444895c6ea — Environment-variable access.

pkgs/go/[email protected]/examples/ai_apps/ai_apps_handler.go:21

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8e78e0d5643d9b15 — Environment-variable access.

pkgs/go/[email protected]/examples/ai_apps/ai_apps_handler.go:30

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #20c76d31f32669d9 — Environment-variable access.

pkgs/go/[email protected]/examples/audit/audit.go:25

	token := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0f2002f9be5b0224 — Environment-variable access.

pkgs/go/[email protected]/examples/buttons/buttons.go:18

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #60651ba4eca0e77f — Environment-variable access.

pkgs/go/[email protected]/examples/chat_streaming/chat_streaming.go:30

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #384fc90e8c84a72c — Environment-variable access.

pkgs/go/[email protected]/examples/chat_streaming/chat_streaming.go:39

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7dfad55e0a8b213f — Environment-variable access.

pkgs/go/[email protected]/examples/connparams/connparams.go:20

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b10c05550d887ce7 — Environment-variable access.

pkgs/go/[email protected]/examples/conversation_history/conversation_history.go:18

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b4b791f13e403d23 — Environment-variable access.

pkgs/go/[email protected]/examples/conversations/conversations.go:11

	userToken := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a95fbc3133f81eb — Environment-variable access.

pkgs/go/[email protected]/examples/conversations_invite/conversations_invite.go:19

	userToken := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #d7d1fb4b0981015b — Environment-variable access.

pkgs/go/[email protected]/examples/dialog/dialog.go:23

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #75d8f04c08a60a76 — Environment-variable access.

pkgs/go/[email protected]/examples/dialog/dialog.go:29

	signingSecret = os.Getenv("SLACK_SIGNING_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b01c239cbdf066e0 — Environment-variable access.

pkgs/go/[email protected]/examples/eventsapi/events.go:15

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #95ec3fff073be01b — Environment-variable access.

pkgs/go/[email protected]/examples/eventsapi/events.go:16

	signingSecret := os.Getenv("SLACK_SIGNING_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #72e09bfd58a57133 — Environment-variable access.

pkgs/go/[email protected]/examples/files/files.go:12

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3e7b8d8bf003fca1 — Environment-variable access.

pkgs/go/[email protected]/examples/files/multiple_files/multiple_files.go:12

	token, ok := os.LookupEnv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #317ca5464bc20d01 — Environment-variable access.

pkgs/go/[email protected]/examples/files_remote/files_remote.go:13

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2252352008482bee — Environment-variable access.

pkgs/go/[email protected]/examples/function/function.go:14

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #3b00150c0dd101ac — Environment-variable access.

pkgs/go/[email protected]/examples/function/function.go:20

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #9fb7218e970e40ec — Environment-variable access.

pkgs/go/[email protected]/examples/messages/messages.go:16

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b3b2c8b617450ec4 — Environment-variable access.

pkgs/go/[email protected]/examples/modal/modal.go:92

	signingSecret := os.Getenv("SLACK_SIGNING_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f5f50510fd0e8d2a — Environment-variable access.

pkgs/go/[email protected]/examples/modal/modal.go:195

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #537ecd9426519b4a — Environment-variable access.

pkgs/go/[email protected]/examples/pagination/pagination.go:53

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf777e6a95af66ce — Environment-variable access.

pkgs/go/[email protected]/examples/pins/pins.go:17

	apiToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55a3d41f0bdbe926 — Environment-variable access.

pkgs/go/[email protected]/examples/reactions/reactions.go:17

	apiToken := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #8dffe484bd12e1d5 — Filesystem access.

pkgs/go/[email protected]/examples/remotefiles/remotefiles.go:12

	r, err := os.Open("slack-go.png")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #32194fea6f05dd53 — Environment-variable access.

pkgs/go/[email protected]/examples/slash/slash.go:15

	signingSecret := os.Getenv("SLACK_SIGNING_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #c09636afc48bc2b0 — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:15

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #27510518e08f3d6b — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:26

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #55f50359e26eaab1 — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode_handler/socketmode_handler.go:15

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7c2dd1ec565a2f99 — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode_handler/socketmode_handler.go:24

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #4a9fd5be06dca9f9 — Environment-variable access.

pkgs/go/[email protected]/examples/team/team.go:16

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7ae0c01bac1a1f08 — Environment-variable access.

pkgs/go/[email protected]/examples/users/users.go:16

	userToken := os.Getenv("SLACK_USER_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #0d5005409460207f — Environment-variable access.

pkgs/go/[email protected]/examples/websocket/websocket.go:17

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #818db056b6b4bac2 — Environment-variable access.

pkgs/go/[email protected]/examples/websocket_respond/respond.go:13

	token := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601fa445ae4283ed — Filesystem access.

pkgs/go/[email protected]/misc.go:287

	file, err := os.Open(fullpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/rusq/slack

go dependency

medium pii_flow tooling Excluded from app score unknown #89aedee6a35fcad5 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:51 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:51

		fmt.Printf("Could not send message: %v", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #a48d9d0b476244a4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/buttons/buttons.go:53 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:15 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/buttons/buttons.go:53

	fmt.Printf("Message with buttons successfully sent to channel %s at %s", channelID, timestamp)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #eaebee47f6e39643 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:41 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:41

			fmt.Println("Infos:", ev.Info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #9f2af9dd2ac14657 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:42 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:42

			fmt.Println("Connection counter:", ev.ConnectionCount)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #56e4a2694aa5e6ad — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:47 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:47

			fmt.Printf("Message: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #f6f3d02f2cc1b935 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:50 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:50

			fmt.Printf("Presence Change: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #78efaeae36fabc65 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:53 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:53

			fmt.Printf("Current latency: %v\n", ev.Value)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #4af78e49bc767d12 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/connparams/connparams.go:56 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:13 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/connparams/connparams.go:56

			fmt.Printf("Error: %s\n", ev.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #35b6593a638a7ebf — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

		fmt.Printf("%s\n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #5eaf37a4e3726ac3 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/conversations/conversations.go:28 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:11 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/conversations/conversations.go:28

		fmt.Printf("Channel: %v\n", channel)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #28ef7ecc53c1b19e — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:26 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:26

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #80eae4a5bb0c7c62 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:30 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:30

				fmt.Printf("Event received: %+v\n", eventsAPIEvent)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #02747b529a3a7ae7 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/function/function.go:47 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:14 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/function/function.go:47

								fmt.Printf("failed posting message: %v \n", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #cd3473dba1dabfa2 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:61 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:61

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #25b0e21ab6a202f8 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:66 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:66

				fmt.Printf("Event received: %+v\n", eventsAPIEvent)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c081a553e8bc14b6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:77 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:77

							fmt.Printf("failed posting message: %v", err)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #be4ddb4a4766dfd1 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:80 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:80

						fmt.Printf("user %q joined to channel %q", ev.User, ev.Channel)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c29dfc12caa41ff6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:88 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:88

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #026f4de5d3c59d90 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:93 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:93

				fmt.Printf("Interaction received: %+v\n", callback)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #591a2760763cc39b — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:114 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:16 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/socketmode/socketmode.go:114

					fmt.Printf("Ignored %+v\n", evt)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #005f6eff5c2200c1 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:33 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:33

			fmt.Println("Infos:", ev.Info)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #ff70119582527fcb — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:34 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:34

			fmt.Println("Connection counter:", ev.ConnectionCount)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #e5e889c946ce3fd9 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:39 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:39

			fmt.Printf("Message: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #1aa3fb88fd364fa6 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:42 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:42

			fmt.Printf("Presence Change: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #31355a3bd19546d4 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:45 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:45

			fmt.Printf("Current latency: %v\n", ev.Value)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #3ce0b9eff1f93363 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:48 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:48

			fmt.Printf("Desktop Notification: %v\n", ev)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #6f9d7201612e9e67 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/websocket/websocket.go:51 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:12 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/websocket/websocket.go:51

			fmt.Printf("Error: %s\n", ev.Error())

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 14 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #c4fc31d9809c44f0 — Environment-variable access.

pkgs/go/[email protected]/examples/buttons/buttons.go:15

	token, ok = os.LookupEnv("SLACK_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #756a27afb7a20a5a — Environment-variable access.

pkgs/go/[email protected]/examples/buttons/buttons.go:20

	channel, ok = os.LookupEnv("SLACK_CHANNEL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #7112fba928814379 — Environment-variable access.

pkgs/go/[email protected]/examples/connparams/connparams.go:13

	token, ok := os.LookupEnv("SLACK_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #e9891b5568dd0cf6 — Environment-variable access.

pkgs/go/[email protected]/examples/conversations/conversations.go:11

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #fa3f7a34ec612672 — Environment-variable access.

pkgs/go/[email protected]/examples/eventsapi/events.go:18

	signingSecret := os.Getenv("SLACK_SIGNING_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bae33ef89b62e8c5 — Environment-variable access.

pkgs/go/[email protected]/examples/function/function.go:14

		os.Getenv("SLACK_BOT_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #b2769f270f65245b — Environment-variable access.

pkgs/go/[email protected]/examples/function/function.go:16

		slack.OptionAppLevelToken(os.Getenv("SLACK_APP_TOKEN")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #14fd822bb63d42e3 — Filesystem access.

pkgs/go/[email protected]/examples/remotefiles/remotefiles.go:12

	r, err := os.Open("slack-go.png")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #09fba0ffdbfa3c6c — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:16

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #a3ab21d5ac994429 — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode/socketmode.go:26

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #dd87a85d48c19225 — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode_handler/socketmode_handler.go:16

	appToken := os.Getenv("SLACK_APP_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ff02fec7a2f0d6fc — Environment-variable access.

pkgs/go/[email protected]/examples/socketmode_handler/socketmode_handler.go:25

	botToken := os.Getenv("SLACK_BOT_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #bf04b69fd8073652 — Environment-variable access.

pkgs/go/[email protected]/examples/websocket/websocket.go:12

	token, ok := os.LookupEnv("SLACK_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #596a83fe65b5c34e — Filesystem access.

pkgs/go/[email protected]/misc.go:132

	file, err := os.Open(fullpath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/mark3labs/mcp-go

go dependency

medium pii_flow tooling Excluded from app score unknown #d52de6a2561b8764 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/oauth_client/main.go:89 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/oauth_client/main.go:31 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/oauth_client/main.go:89

	fmt.Printf("Client initialized successfully! Server: %s %s\n",
		result.ServerInfo.Name,
		result.ServerInfo.Version)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

medium pii_flow tooling Excluded from app score unknown #c3c0a97323ac4f20 — PII-bearing data is written to a log/print sink. Logged PII is a privacy concern even when it does not leave the process.

pkgs/go/[email protected]/examples/oauth_client/main.go:102 · flow /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/oauth_client/main.go:31 → /tmp/closeopen-xvy8x964/pkgs/go/[email protected]/examples/oauth_client/main.go:102

		fmt.Printf("- %s\n", resource.URI)

PII-bearing data is written to a log/print sink — it stays in-process and does not leave the application, but logged PII is still a privacy concern.

Fix: Avoid logging user identifiers; redact or omit PII from log/print statements.

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #637d992b00b720fe — Environment-variable access.

pkgs/go/[email protected]/client/transport/stdio.go:180

		cmd.Env = append(os.Environ(), c.env...)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #98eead39d63a3e96 — Environment-variable access.

pkgs/go/[email protected]/examples/custom_context/main.go:32

	return withAuthKey(ctx, os.Getenv("API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unknown #c42c3ea533df5229 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/go/[email protected]/examples/custom_context/main.go:54

	req, err := http.NewRequestWithContext(ctx, "GET", "https://httpbin.org/anything", nil)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unknown #d33108ac7ded7c05 — Environment-variable access.

pkgs/go/[email protected]/examples/oauth_client/main.go:30

		ClientID:     os.Getenv("MCP_CLIENT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #ae5475630ba19e13 — Environment-variable access.

pkgs/go/[email protected]/examples/oauth_client/main.go:31

		ClientSecret: os.Getenv("MCP_CLIENT_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e63cd62bd83b461b — Filesystem access.

pkgs/go/[email protected]/server/internal/gen/main.go:52

	processedContent, err := os.ReadFile(tempFilePath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #549673bffcb891f2 — Filesystem access.

pkgs/go/[email protected]/server/internal/gen/main.go:62

		destFile, err := os.Create(filepath.Join(destPath, fileName))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/gocarina/gocsv

go dependency

expand_more 1 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #2a9e3e885f05827b — Filesystem access.

pkgs/go/[email protected]/examples/full/main.go:68

	clientsFile, err := os.OpenFile("clients.csv", os.O_RDWR|os.O_CREATE|os.O_TRUNC, os.ModePerm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/openai/openai-go

go dependency

expand_more 6 low-confidence finding(s)

low env_fs dependency Excluded from app score #c7b4bdebcd1099ec — Environment-variable access.

pkgs/go/[email protected]/client.go:45

	if o, ok := os.LookupEnv("OPENAI_BASE_URL"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89ade77f53d21882 — Environment-variable access.

pkgs/go/[email protected]/client.go:48

	if o, ok := os.LookupEnv("OPENAI_API_KEY"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09fc0f61a3cf4d0f — Environment-variable access.

pkgs/go/[email protected]/client.go:51

	if o, ok := os.LookupEnv("OPENAI_ORG_ID"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e75835c8e432c9ff — Environment-variable access.

pkgs/go/[email protected]/client.go:54

	if o, ok := os.LookupEnv("OPENAI_PROJECT_ID"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6054e878cf7fdf55 — Environment-variable access.

pkgs/go/[email protected]/client.go:57

	if o, ok := os.LookupEnv("OPENAI_WEBHOOK_SECRET"); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f56c32e9addcc194 — Environment-variable access.

pkgs/go/[email protected]/internal/testutil/testutil.go:13

		if str, ok := os.LookupEnv(SKIP_MOCK_TESTS); ok {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/refraction-networking/utls

go dependency

expand_more 12 low-confidence finding(s)

low env_fs tooling Excluded from app score unknown #edad9f2572eea242 — Filesystem access.

pkgs/go/[email protected]/examples/ech/main.go:43

	klw, err := os.OpenFile("./sslkeylogging.log", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f57d6ff931f742c4 — Filesystem access.

pkgs/go/[email protected]/generate_cert.go:144

	certOut, err := os.Create("cert.pem")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eadc72e6248efc65 — Filesystem access.

pkgs/go/[email protected]/generate_cert.go:156

	keyOut, err := os.OpenFile("key.pem", os.O_WRONLY|os.O_CREATE|os.O_TRUNC, 0600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cad355105885e6d — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:91

	return os.Getenv("GO_BUILDER_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1079986741086e7f — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:97

	if os.Getenv("GO_GCFLAGS") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0b6dfd118b664a9 — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:115

	if os.Getenv("GO_GCFLAGS") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #578909cec100b188 — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:151

		os.Getenv(envVar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a6091ed0a4b0430a — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:322

	if v, _ := strconv.ParseBool(os.Getenv("GO_BUILDER_FLAKY_NET")); v {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7cf8cb5771b25834 — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:334

	for _, env := range os.Environ() {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fccc87a53b2a47f3 — Environment-variable access.

pkgs/go/[email protected]/testenv/testenv.go:396

		if s := os.Getenv("GO_TEST_TIMEOUT_SCALE"); s != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #873a8d3c8273e700 — Filesystem access.

pkgs/go/[email protected]/tls.go:235

	certPEMBlock, err := os.ReadFile(certFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b99dd5307fed41c — Filesystem access.

pkgs/go/[email protected]/tls.go:239

	keyPEMBlock, err := os.ReadFile(keyFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/rusq/slackauth

go dependency

expand_more 7 low-confidence finding(s)

low env_fs dependency Excluded from app score #d39df0a51aafc9c6 — Environment-variable access.

pkgs/go/[email protected]/browser.go:159

			LocalBrowser{p.Name, filepath.Join(os.Getenv("ProgramFiles"), p.Path)},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c62ea4811852200 — Environment-variable access.

pkgs/go/[email protected]/browser.go:160

			LocalBrowser{p.Name, filepath.Join(os.Getenv("ProgramFiles(x86)"), p.Path)},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64f8a0df3e1d5ebc — Environment-variable access.

pkgs/go/[email protected]/browser.go:161

			LocalBrowser{p.Name, filepath.Join(os.Getenv("LocalAppData"), p.Path)},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #285b616702e9c27d — Environment-variable access.

pkgs/go/[email protected]/cmd/playground/main.go:36

	isDebug   = flag.Bool("d", os.Getenv("DEBUG") == "1", "enable debug")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #277cfac55c8a1904 — Filesystem access.

pkgs/go/[email protected]/cmd/playground/main.go:69

		f, err := os.Create(*traceFile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #f2c7221378824901 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/go/[email protected]/cmd/playground/main.go:135

	req, err := http.NewRequestWithContext(ctx, http.MethodPost, "https://slack.com/api/auth.test", strings.NewReader(values.Encode()))

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #9c0c6fa5f3eabfc2 — Environment-variable access.

pkgs/go/[email protected]/cmd/playground/main.go:247

	v := os.Getenv(env)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

github.com/rusq/slackdump/v3

go dependency

expand_more 51 low-confidence finding(s)

low env_fs dependency Excluded from app score #44f225b7d4a471c0 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/instruments.go:34

		lf, err := os.OpenFile(filename, os.O_CREATE|os.O_APPEND|os.O_WRONLY, 0o666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7a1cba5c1ce20dc — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/apiconfig/apiconfig.go:38

	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e40250d982d72f3d — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/apiconfig/apiconfig.go:49

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc91538118d069d4 — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/cfg/cfg.go:70

	enableLogColors(os.Getenv("NOCOLOR"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55f22c136ee6cd4a — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/cfg/cfg.go:139

	fs.StringVar(&TraceFile, "trace", os.Getenv("TRACE_FILE"), "trace `filename`")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34337c707500bbb0 — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/cfg/cfg.go:140

	fs.StringVar(&LogFile, "log", os.Getenv("LOG_FILE"), "log `file`, if not specified, messages are printed to STDERR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7a52d2953e403a66 — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/cfg/cfg_debug.go:17

	fs.StringVar(&CPUProfile, "cpuprofile", os.Getenv("CPU_PROFILE"), "write CPU profile to `file`")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #242c82e24d504ad1 — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/cfg/cfg_debug.go:18

	fs.StringVar(&MEMProfile, "memprofile", os.Getenv("MEM_PROFILE"), "write memory profile to `file`")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a7ec3beec070f29 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/edge.go:144

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f74290de56c2675 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/encrypt.go:184

			in, err = os.Open(args[0])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6f858bc2c05f8a1 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/encrypt.go:198

			out, err = os.Create(args[1])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad2d4e8f35a782db — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/hydrate.go:114

	f, err := os.Open(archive)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ee426764a79fa08 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/hydrate.go:137

	f, err := os.Create(zipfile)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #48e1035754ae423a — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/info/os.go:22

	inf.IsXactive = os.Getenv("DISPLAY") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74a0ba41a4213d12 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/obfuscate.go:135

		in, err = os.Open(obfparam.input)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7168b3f8d92c1d5 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/obfuscate.go:174

		out, err = os.Create(obfparam.output)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d01e04f8051236b6 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/rawoutput.go:121

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69e92ce4da062632 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/sdv1/sdv1.go:30

	f, err := os.Open(filepath)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #864dcb09a10848c4 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/search.go:139

		f, err := os.Open(args[0])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #051312b084aaa67f — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/search.go:204

	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2272ba8934bec53 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/diag/search.go:225

	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d3b727317571b5d — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/format/format.go:116

		f, err := os.Open(input)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c2df94c870bef11 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/list/common.go:138

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #2e9a03e3bd8c27ff — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/internal/ui/updaters/examples/time/main.go:15

	logf, err := os.Create(logname)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c55daea9ac17f57 — Environment-variable access.

pkgs/go/[email protected]/cmd/slackdump/main.go:176

		if os.Getenv("SLACK_TOKEN") != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a584c94b9449f4bf — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/main_debug.go:33

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c73ddbcc697159d3 — Filesystem access.

pkgs/go/[email protected]/cmd/slackdump/main_debug.go:58

	f, err := os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c15cf52ff6f92fb — Filesystem access.

pkgs/go/[email protected]/contrib/_gen/update.go:63

	f, err := os.Open(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f9594bafe6cb571 — Filesystem access.

pkgs/go/[email protected]/contrib/_gen/update.go:78

	f, err := os.Create(path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0dea3f5e81c4004 — Environment-variable access.

pkgs/go/[email protected]/internal/cache/auth.go:26

var isWSL = os.Getenv("WSL_DISTRO_NAME") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4537be8eb7eab0c7 — Filesystem access.

pkgs/go/[email protected]/internal/cache/auth.go:300

	return os.Create(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c3e1e5fa1d4b925 — Filesystem access.

pkgs/go/[email protected]/internal/cache/auth.go:304

	return os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22230c2dbbc272c5 — Filesystem access.

pkgs/go/[email protected]/internal/cache/manager.go:259

	f, err := os.Open(filepath.Join(m.dir, currentWspFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c15be7c367f23dc1 — Filesystem access.

pkgs/go/[email protected]/internal/cache/manager.go:314

	f, err := os.Create(filepath.Join(m.dir, currentWspFile))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dd36589b380e65b — Filesystem access.

pkgs/go/[email protected]/internal/chunk/directory.go:359

	return os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90070f75830fe7c8 — Filesystem access.

pkgs/go/[email protected]/internal/chunk/directory.go:387

	f, err := os.OpenFile(filename, os.O_CREATE|os.O_WRONLY, 0o644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #592f48bcc4dd7fff — Filesystem access.

pkgs/go/[email protected]/internal/chunk/directory.go:431

	r, err := os.Open(wf.Name() + extIdx)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f29e11d4c982fb44 — Filesystem access.

pkgs/go/[email protected]/internal/chunk/directory.go:446

	w, err := os.Create(wf.Name() + extIdx)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00e1346998bc32d2 — Filesystem access.

pkgs/go/[email protected]/internal/chunk/directory.go:460

	return os.Open(filepath.Join(d.dir, UploadsDir, id, name))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d68f741f5c717940 — Filesystem access.

pkgs/go/[email protected]/internal/chunk/filemgr.go:89

		f, err := os.Open(tempfile) // existing temporary file

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb939ea68bc9c8c6 — Filesystem access.

pkgs/go/[email protected]/internal/chunk/filemgr.go:97

	cf, err := os.Open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f292fa11ebe3e85c — Filesystem access.

pkgs/go/[email protected]/internal/chunk/obfuscate/directory.go:62

	f, err := os.Open(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dc14f5311456d1d — Filesystem access.

pkgs/go/[email protected]/internal/chunk/obfuscate/directory.go:81

	w, err := os.Create(filepath.Join(trgDir, string(fileid)+".json.gz"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bba0d6f46a0d359c — Filesystem access.

pkgs/go/[email protected]/internal/edge/edge.go:63

	tape, err := os.Create("tape.txt")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #06fa23363c219629 — Filesystem access.

pkgs/go/[email protected]/internal/fixtures/file_functions.go:33

	if err := os.WriteFile(path, []byte(content), 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #66f960611ab2f121 — Filesystem access.

pkgs/go/[email protected]/internal/fixtures/file_functions.go:44

		if err := os.WriteFile(filename, []byte("dummy"), 0600); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unknown #f78754c5e5ae4b55 — Environment-variable access.

pkgs/go/[email protected]/internal/fixtures/fixtures.go:24

var InCI = os.Getenv("CI") == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a860b40112f2831 — Filesystem access.

pkgs/go/[email protected]/internal/osext/move.go:16

	in, err := os.Open(src)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03eb927a049336d3 — Environment-variable access.

pkgs/go/[email protected]/internal/osext/terminal.go:12

	return term.IsTerminal(int(os.Stdout.Fd())) && term.IsTerminal(int(os.Stdin.Fd())) && os.Getenv("TERM") != "dumb"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #99f1fa155533e724 — Filesystem access.

pkgs/go/[email protected]/internal/structures/entity_list.go:152

	f, err := os.Open(filename)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eb589d40c271cd4 — Environment-variable access.

pkgs/go/[email protected]/internal/viewer/viewer.go:23

var debug = os.Getenv("DEBUG") != ""

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

go.uber.org/zap

go dependency

expand_more 1 low-confidence finding(s)

low env_fs dependency Excluded from app score #1c7ffbd90b8d0eb5 — Environment-variable access.

pkgs/go/[email protected]/internal/ztest/timeout.go:55

	if v := os.Getenv("TEST_TIMEOUT_SCALE"); v != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.ngrok.com/ngrok/v2

go dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #41184f6f522fcdd5 — Environment-variable access.

pkgs/go/[email protected]/defaults.go:10

	WithAuthtoken(os.Getenv("NGROK_AUTHTOKEN")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0d9508512d41228 — Environment-variable access.

pkgs/go/[email protected]/internal/integration_tests/test_utils.go:27

	if os.Getenv("NGROK_TEST_ONLINE") == "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37bf7634a561eab7 — Environment-variable access.

pkgs/go/[email protected]/internal/integration_tests/test_utils.go:38

	authToken := os.Getenv("NGROK_AUTHTOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

golang.org/x/net

go dependency

expand_more 28 low-confidence finding(s)

low env_fs dependency Excluded from app score #a6dd0d7d3a1f963a — Filesystem access.

pkgs/go/[email protected]/html/atom/gen.go:50

	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dba72e7dad27c0a1 — Environment-variable access.

pkgs/go/[email protected]/http/httpproxy/proxy.go:95

		CGI:        os.Getenv("REQUEST_METHOD") != "",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1eaa567ea2650a0 — Environment-variable access.

pkgs/go/[email protected]/http/httpproxy/proxy.go:101

		if val := os.Getenv(n); val != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f305e77fb63b22e — Environment-variable access.

pkgs/go/[email protected]/http2/gotrack.go:21

var DebugGoroutines = os.Getenv("DEBUG_HTTP2_GOROUTINES") == "1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #49b7e9718ab9f8bb — Environment-variable access.

pkgs/go/[email protected]/http2/h2c/h2c.go:34

	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e858109da8fc7a33 — Filesystem access.

pkgs/go/[email protected]/http2/hpack/gen.go:178

	if err := os.WriteFile(name, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #510d284797edcbed — Environment-variable access.

pkgs/go/[email protected]/http2/http2.go:49

	e := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #467c5df34ff699f3 — Filesystem access.

pkgs/go/[email protected]/internal/iana/gen.go:71

	if err := os.WriteFile("const.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5c6a9ce259019fe — Environment-variable access.

pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:69

	if keylog := os.Getenv("SSLKEYLOGFILE"); keylog != "" {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08702d0713b805a6 — Filesystem access.

pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:70

		f, err := os.Create(keylog)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff6bcfc1a9773a40 — Environment-variable access.

pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:78

	testcase := os.Getenv("TESTCASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6188fabb472a0294 — Filesystem access.

pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:218

	f, err := os.Open(filepath.Join(*root, string(req)))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1af7cad81a2c79b0 — Filesystem access.

pkgs/go/[email protected]/internal/quic/cmd/interop/main.go:269

	file, err := os.Create(filepath.Join(*output, u.Path[1:]))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25591c95f1790a9f — Filesystem access.

pkgs/go/[email protected]/ipv4/gen.go:41

	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc66d00cc43c6a36 — Filesystem access.

pkgs/go/[email protected]/ipv4/gen.go:63

	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #073c824663653f20 — Filesystem access.

pkgs/go/[email protected]/ipv4/gen.go:102

	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f66650a004d15420 — Filesystem access.

pkgs/go/[email protected]/ipv6/gen.go:41

	f, err := os.Open(defs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2868c2a53b43eec3 — Filesystem access.

pkgs/go/[email protected]/ipv6/gen.go:63

	if err := os.WriteFile(zsys, b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #027f3a5b527a5bd1 — Filesystem access.

pkgs/go/[email protected]/ipv6/gen.go:102

	if err := os.WriteFile("iana.go", b, 0644); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb9e4b09b93e5f3c — Environment-variable access.

pkgs/go/[email protected]/proxy/proxy.go:138

		e.val = os.Getenv(n)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f67f7ab76d91e488 — Filesystem access.

pkgs/go/[email protected]/publicsuffix/gen.go:275

	return os.WriteFile(filename, b, 0644)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #d9b6d512e0bc695f — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/go/[email protected]/publicsuffix/gen.go:279

	res, err := http.Get(gitCommitURL)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #ca9190a70870960e — Filesystem access.

pkgs/go/[email protected]/publicsuffix/gen.go:320

	if err := os.WriteFile("data/text", []byte(combinedText), 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b708aee43a0ec0d8 — Filesystem access.

pkgs/go/[email protected]/publicsuffix/gen.go:333

	if err := os.WriteFile("data/nodes", nodes, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18a45dc176215963 — Filesystem access.

pkgs/go/[email protected]/publicsuffix/gen.go:341

	if err := os.WriteFile("data/children", children, 0666); err != nil {

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b4766443af32b74 — Environment-variable access.

pkgs/go/[email protected]/quic/log.go:19

	s := os.Getenv("GODEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6452caeba7c85a9 — Filesystem access.

pkgs/go/[email protected]/quic/qlog/qlog.go:183

		w, err = os.OpenFile(filepath.Join(opts.Dir, filename), os.O_CREATE|os.O_EXCL|os.O_WRONLY, 0666)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d3adf1944e6fdf49 — Filesystem access.

pkgs/go/[email protected]/webdav/file.go:92

	f, err := os.OpenFile(name, flag, perm)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

verified_user No application data leak found

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Application data flows

</> First-Party Code

first-party (go)

</> Dependencies

github.com/slack-go/slack

github.com/rusq/slack

github.com/mark3labs/mcp-go

github.com/gocarina/gocsv

github.com/openai/openai-go

github.com/refraction-networking/utls

github.com/rusq/slackauth

github.com/rusq/slackdump/v3

go.uber.org/zap

golang.ngrok.com/ngrok/v2

golang.org/x/net