Close Open Privacy Scan

link https://github.com/kyegomez/swarms

bolt Snapshot: commit 3106f0c

science engine v1.4

schedule 2026-07-14T01:11:07.237559+00:00

smart_toy MCP server detected: litellm, mcp — detected in dependencies, not a safety judgment.

App Privacy Score

52 /100

Medium privacy risk — application leak confirmed

Medium risk · 1537 finding(s)

Dependency score: 0 (High risk)

bar_chart Score Breakdown

pii_flow −30

egress −15

env_fs −3

list Scan Summary

14 high 66 medium 1457 low

First-party packages: 1

Dependency packages: 14

Ecosystem: python

swap_horiz Confirmed data exfiltration in application code

External domains: 10.10.11.249::ffff:192.168.0.1aactions.zapier.comadam.herokuapp.comai-gateway.vercel.shai-guard.aws.us.pangea.cloudai.google.devaiplatform.googleapis.comandroid.stackexchange.comapiapi-inference.huggingface.coapi.agentops.aiapi.ai21.comapi.aim.securityapi.aimlapi.comapi.aleph-alpha.comapi.anthropic.comapi.assemblyai.comapi.braintrustdata.comapi.bytez.comapi.cerebras.aiapi.clarifai.comapi.cloudflare.comapi.cloudzero.comapi.cohere.aiapi.cohere.comapi.cometapi.comapi.confident-ai.comapi.deepgram.comapi.deepinfra.comapi.deepseek.comapi.elevenlabs.ioapi.endpoints.anyscale.comapi.eu.assemblyai.comapi.featherless.aiapi.fireworks.aiapi.friendli.aiapi.galadriel.comapi.github.comapi.githubcopilot.comapi.groq.comapi.hconeai.comapi.honeycomb.ioapi.humanloop.comapi.hyperbolic.xyzapi.jina.aiapi.lakera.aiapi.lambda.aiapi.litellm.aiapi.llama.comapi.mistral.aiapi.moonshot.aiapi.morphllm.comapi.nlpcloud.ioapi.noma.securityapi.novita.aiapi.openai.comapi.openai.com-12api.perplexity.aiapi.pillar.securityapi.promptlayer.comapi.replicate.comapi.resend.comapi.sambanova.aiapi.smith.langchain.comapi.studio.nebius.aiapi.together.xyzapi.topazlabs.comapi.v0.devapi.voyageai.comapi.x.aiapp.datarobot.comapp.empower.devapp.phoenix.arize.comarchive.orgark.cn-beijing.volces.comarstechnica.comarxiv.orgaws.amazon.comazure-us-east-1.openai.azure.combbayes.cs.ucla.edubedrock-agent-runtimebedrock-runtimebetterexplained.combl.ocks.orgblog.alifaraji.irblog.famzah.netblog.ganssle.ioblogs.ams.orgbooks.google.combootlin.combost.ocks.orgbrew.shbrotlipy.readthedocs.iobugs.python.orgcal.comcalendly.comcdnjs.cloudflare.comchat.maritaca.aiciteseer.ist.psu.educiteseerx.ist.psu.educlarifai.comcloud.getliteral.aicloud.google.comcloud.ibm.comcloud.langfuse.comcode.activestate.comcodestral.mistral.aicognitiveservices.azure.comcole-maclean.github.iocommunity.openai.comconsole.cloud.google.comcourses.cs.ut.eecrypto.cs.mcgill.cad-uuwbxj1u4cnu.studio.us-west-2.sagemaker.awsd3js.orgdashscope-intl.aliyuncs.comdashscope.aliyuncs.comdatatracker.ietf.orgdbpubs.stanford.edudeepeval.confident-ai.comdeepinfra.comdeveloper.android.comdeveloper.apple.comdeveloper.hashicorp.comdeveloper.mozilla.orgdeveloper.pagerduty.comdevelopers.generativeai.googlediscord.comdiscord.ggdiscoveryengine.googleapis.comdiscuss.python.orgdl.acm.orgdocs.ai21.comdocs.aleph-alpha.comdocs.anthropic.comdocs.api.nvidia.comdocs.aws.amazon.comdocs.codestral.comdocs.cohere.comdocs.databricks.comdocs.datadoghq.comdocs.expo.devdocs.fireworks.aidocs.hyperbolic.xyzdocs.litellm.aidocs.microsoft.comdocs.mistral.aidocs.morphllm.comdocs.nlpcloud.comdocs.perplexity.aidocs.predibase.comdocs.pydantic.devdocs.python.orgdocs.rsdocs.sambanova.aidocs.scipy.orgdocs.snowflake.comdocs.swarms.worlddocs.together.aidocs.voyageai.comdoi.acm.orgdoi.orgdx.doi.orgeccc.hpi-web.deeclectic.ss.uci.eduen.wikipedia.orgepubs.siam.orgerrors.pydantic.deveu.api.confident-ai.comeu.assemblyai.comeu.deepeval.confident-ai.comevents.pagerduty.comexam_ple.comexampleopenaiendpoint-production.up.railway.appexcalidraw.comexternal.api.recraft.aifb.mefeatherless.aifoo.comforms.glefreedesktop.orggenerativelanguage.googleapis.comgephi.orggexf.netgit.kernel.orggithub.comgitlab.comgoogle.github.iogr-prd-trial.aporia.comgraph.microsoft.comgraphml.graphdrawing.orghal.archives-ouvertes.frhdl.handle.nethelp.openai.comhomepages.dcc.ufmg.brhrcak.srce.hrhttp-intake.logshttpbin.orghuggingface.cohuggingface.github.iohumanloop.comhuntr.comhypothesis.readthedocs.ioiam.cloud.ibm.comieeexplore.ieee.orginference-docs.cerebras.aiinference.api.nscale.cominference.baseten.coinference.do-ai.runinference.generativeaiinference.readthedocs.ioinfinity.modal.michaelfeil.euintegrate.api.nvidia.comiopscience.iop.orgiuuk.mff.cuni.czjina.aijmlr.csail.mit.edujournals.aps.orgjournals.plos.orgjponnela.comjson-schema.orglangtrace.ailearn.microsoft.comlicense.litellm.ailink.aps.orglink.springer.comlinuxdevcenter.comlists.sourceforge.netlitellm-listing.s3.amazonaws.comlitellm-production-7002.up.railway.applitellm.ailitellm.vercel.applitellm8397336933.openai.azure.comlitellm8397336933.services.ai.azure.comllama.developer.meta.comlmstudio.ailocation-aiplatform.googleapis.comlog.athina.ailogfire-api.pydantic.devlogin.microsoftonline.commail.python.orgmanual.cytoscape.orgmath.berkeley.edumath.mit.edumath.stackexchange.commath.wvu.edumathworld.wolfram.commembers.loria.frmetadata.google.internalmicrosoft.github.iomistral-serverlessmodelarmormodelcontextprotocol.iomodels.inference.ai.azure.commodels.litellm.aimomentjs.commypy.readthedocs.iomüller.dennats.ionetworkx.lanl.govnetworkx.orgnextjs.orgnothooks.slack.comnovita.aioeis.orgollama.aionlinelibrary.wiley.comopenai.comopenmeter.cloudopenproceedings.orgopenrouter.aiother.comotlp.agentops.cloudotlp.arize.compackaging.python.orgpendulum.eustace.iopeps.python.orgplatform.moonshot.aiplatform.openai.complatform.stability.aiportal.acm.orgpub.ist.ac.atpubsub.googleapis.compydantic-docs.helpmanual.iopygments.orgpygraphviz.github.iopypi.orgpython-devtools.helpmanual.iopyyaml.orgraw.githubusercontent.comreact.devreactjs.orgredis.iorefspecs.linuxfoundation.orgreplicate.comrequests.readthedocs.ioresend.comrich.readthedocs.iorosettacode.orgrouter.huggingface.coruntime.sagemakerrussellfunk.orgsariyuce.comscipy.orgsecretmanager.googleapis.comserver.lasso.securityserverfault.comservice.api.aisecurity.paloaltonetworks.comserving.app.predibase.comsetuptools.pypa.iosites.cs.ucsb.eduspecifications.freedesktop.orgstackoverflow.comstorage.azure.comstorage.googleapis.comstream-b.svc.rno2.c.replicate.netstsswarms.worldtechnet.microsoft.comtest.comtexttospeech.googleapis.comtikz.devtimeapi.iotools.ietf.orgtwitter.comus-central1-aiplatform.googleapis.comus-east-1.console.aws.amazon.comus-west-2.console.aws.amazon.comus.cloud.langfuse.comusers.cecs.anu.edu.auv0.devvalidate-pyproject.readthedocs.iovercel.comvideolectures.netviews.scientific-python.orgvisualstudio.microsoft.comvlado.fmf.uni-lj.siw.wikiw3.orgweb.archive.orgweb.eecs.utk.eduweb.math.princeton.eduweb.mit.eduwuecampus2.uni-wuerzburg.dewww-cs-faculty.stanford.eduwww-cs-students.stanford.eduwww-personal.umich.eduwww.algorithmic-solutions.infowww.amazon.comwww.analytictech.comwww.aws-services.infowww.combinatorics.orgwww.comet.comwww.coolmath.comwww.cs.cornell.eduwww.cs.purdue.eduwww.cs.technion.ac.ilwww.cs.umd.eduwww.cs.uu.nlwww.cse.msu.eduwww.example.珠宝www.fim.uni-passau.dewww.gexf.netwww.github.comwww.googleapis.comwww.graphdegeneracy.orgwww.graphviz.orgwww.ibm.comwww.ics.uci.eduwww.informatik.uni-augsburg.dewww.jmlr.orgwww.jstor.orgwww.litellm.aiwww.math.uchicago.eduwww.math.ucsd.eduwww.mdpi.comwww.numberanalytics.comwww.oreilly.comwww.pnas.orgwww.python.orgwww.recraft.aiwww.researchgate.netwww.rfc-editor.orgwww.santafe.eduwww.santofortunato.netwww.scielo.brwww.sciencedirect.comwww.stats.ox.ac.ukwww.systutorials.comwww.textualize.iowww.w3.orgwww.win.tue.nlwww.xudongz.comwww.youtube.comwww.yworks.comwww.zapier.comwww.аррӏе.comwww2.asanet.orgxxn--fiqs8s.icom.museumтест中国.icom.museum

high first-party (python) User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/swarms/telemetry/main.py:132 → repo/swarms/telemetry/main.py:139

hub Dependency data flows (13)

high mcp dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:433 → pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193 → pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674 → pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77 → pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430 → pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:68 → pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:106 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:131 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:191 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188

high litellm dependency User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:215 → pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212

</> First-Party Code

first-party (python)

python first-party

high pii_flow production #1664606c2e5919c0 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

repo/swarms/telemetry/main.py:139 · flow /tmp/closeopen-zrpxd3gl/repo/swarms/telemetry/main.py:132 → /tmp/closeopen-zrpxd3gl/repo/swarms/telemetry/main.py:139

    response = requests.post(
        url, json=payload, headers=headers, timeout=10
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 290 low-confidence finding(s)

low env_fs test-only #0bd01a48b539326c — Filesystem access.

repo/examples/changelogs/v12_update/04_conversation_memory_compact.py:35

    with open(memory_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #74d823070347bc2f — Environment-variable access.

repo/examples/changelogs/v9_examples/example_sub_agents.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #a25d454bb796ead2 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/aop_examples/medical_aop/client.py:76

        epi = requests.get(
            "https://disease.sh/v3/covid-19/countries/USA?strict=true",
            timeout=5,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #4efea1177b7b54f4 — Environment-variable access.

repo/examples/guides/demos/chart_swarm.py:208

        os.environ["OPENAI_API_KEY"] = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f99129e7d280447c — Filesystem access.

repo/examples/guides/demos/chart_swarm.py:218

        with open(img, "rb") as image_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2c0fc135fd681e06 — Environment-variable access.

repo/examples/guides/demos/crypto/ethchain_agent.py:72

        api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #3f1939390a7c7867 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/ethchain_agent.py:107

            response = requests.get(
                "https://api.coingecko.com/api/v3/simple/price",
                params={"ids": "ethereum", "vs_currencies": "usd"},
            )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #026fece952155516 — Filesystem access.

repo/examples/guides/demos/crypto/ethchain_agent.py:140

            with open(self.csv_filename, "w", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5c8c8bfaaf00d557 — Filesystem access.

repo/examples/guides/demos/crypto/ethchain_agent.py:239

        with open(self.csv_filename, "a", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #10b23f26f8df99e5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:131

        ticker_response = requests.get(
            base_url + ticker_endpoint, params=ticker_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #71b3595adee8116a — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:149

        order_book_response = requests.get(
            base_url + order_book_endpoint, params=order_book_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #3cae5e50a094eaa2 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:167

        trades_response = requests.get(
            base_url + trades_endpoint, params=trades_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #46eea79e9f12df2e — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/htx_swarm.py:186

        kline_response = requests.get(
            base_url + kline_endpoint, params=kline_params
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #8ed5ef08c790fcb2 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/crypto/swarms_coin_agent.py:102

    response = requests.get(url, params=params)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #0d3f6e750c619ca4 — Filesystem access.

repo/examples/guides/demos/cuda_swarm.py:326

            with open(self.file_path, mode) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #581551938e4dd0e1 — Filesystem access.

repo/examples/guides/demos/hackathon_feb16/fraud.py:242

        with open(csv_file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6cd666636ca7c207 — Filesystem access.

repo/examples/guides/demos/legal/legal_swarm.py:208

                    with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #57d5aa384045dc57 — Filesystem access.

repo/examples/guides/demos/legal/legal_swarm.py:216

                    with open(
                        file_path, "r", encoding="utf-8"
                    ) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #b3df4e4137ed2e86 — Environment-variable access.

repo/examples/guides/demos/medical/health_privacy_swarm.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #64eab2f051d1b5e3 — Environment-variable access.

repo/examples/guides/demos/medical/health_privacy_swarm_two.py:6

api_key = os.getenv(
    "OPENAI_API_KEY"
)  # ANTHROPIC_API_KEY, COHERE_API_KEY

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4dd02407d9bcd545 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/news_aggregator_summarizer.py:18

        ids = httpx.get(
            "https://hacker-news.firebaseio.com/v0/topstories.json",
            timeout=10,
        ).json()

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #2ecdba1797875d86 — Filesystem access.

repo/examples/guides/demos/news_aggregator_summarizer.py:113

    with open("news_summaries.txt", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #25f6971eb61530fc — Environment-variable access.

repo/examples/guides/demos/privacy_building.py:6

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #35549ce34c4f7d09 — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:289

        with open(pdf_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #133edfc96e10c001 — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:306

        with open(full_path, "w", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #10dc26159771786c — Filesystem access.

repo/examples/guides/demos/real_estate/morgtate_swarm.py:459

            with open(json_path, "w", encoding="utf-8") as jf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #91734297aa20256c — Environment-variable access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:300

        openai_api_key=os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #75a0cae24fcd7d8d — Environment-variable access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:301

        propertyradar_api_key=os.getenv("PROPERTYRADAR_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1a73e2b93d17cbc1 — Filesystem access.

repo/examples/guides/demos/real_estate/real_estate_agent.py:314

    with open("search_results.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #305bdba96b8eb38a — Environment-variable access.

repo/examples/guides/demos/real_estate/realtor_agent.py:32

        "x-rapidapi-key": os.getenv("RAPID_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3b568bd5cc16cb5f — Environment-variable access.

repo/examples/guides/demos/science/open_scientist.py:79

        "x-api-key": os.getenv("EXA_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #d606b03287948591 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/demos/science/open_scientist.py:95

        response = requests.post(
            api_url, json=payload, headers=headers
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #5561f9107233125e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/guides/demos/science/open_scientist.py:95 · flow /tmp/closeopen-zrpxd3gl/repo/examples/guides/demos/science/open_scientist.py:79 → /tmp/closeopen-zrpxd3gl/repo/examples/guides/demos/science/open_scientist.py:95

        response = requests.post(
            api_url, json=payload, headers=headers
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #11f2e9a554772ce0 — Filesystem access.

repo/examples/guides/demos/science/open_scientist.py:110

        with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2a0f8e424a7b49f5 — Environment-variable access.

repo/examples/guides/demos/spike/agent_rearrange_test.py:31

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fff3f0c97cb51a4a — Environment-variable access.

repo/examples/guides/demos/spike/function_caller_example.py:30

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #fbeb21058ef809ff — Environment-variable access.

repo/examples/guides/demos/spike/test.py:31

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4e2ebef097991015 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/convert_json_to_csv.py:4

with open("profession_personas.progress.json", "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9dd3ad1160f2d6d3 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/convert_json_to_csv.py:10

with open("data_personas_progress.csv", "w", newline="") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #da6ce2181bea2eee — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/format_prompt.py:20

        with open(input_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #76294718cc9ecb77 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/format_prompt.py:53

        with open(output_file, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #980fb5ac43500545 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:372

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2d3b7e1664802b60 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:422

                        with open(
                            self.json_progress_file,
                            "r",
                            encoding="utf-8",
                        ) as src:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3fb6d0600bfd3147 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:427

                            with open(
                                backup_file, "w", encoding="utf-8"
                            ) as dst:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3c8bc69fb4305ee7 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:435

                with open(
                    self.json_progress_file, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8b5684ef2c151de8 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:466

                    with open(
                        fallback_file, "w", encoding="utf-8"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2cc36b0e8bac5bd3 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:602

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6a41c9c300255039 — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:612

                with open(
                    self.json_progress_file, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #62e1a1ad75aef56a — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:949

            with open(
                self.json_progress_file, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #987c4a740afa88eb — Filesystem access.

repo/examples/guides/demos/synthetic_data/profession_sim/profession_persona_generator.py:974

                with open(
                    self.json_progress_file, "r", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #3381c144cb1118a8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/deployment/cron_job_examples/simple_concurrent_crypto_cron.py:32

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #60b2341ece702e41 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/deployment/cron_job_examples/solana_price_tracker.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #a449dec158fcc163 — Filesystem access.

repo/examples/guides/hackathon_judge_agent/hackathon_judger_agent.py:112

    with open(file_path, mode="r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #deb9d146213644f8 — Environment-variable access.

repo/examples/guides/hackathons/hackathon_sep_27/api_client.py:7

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #e9f763c779456012 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/guides/hackathons/hackathon_sep_27/nutritional_content_analysis_swarm.py:77

    response = requests.post(url, headers=headers, json=swarm_config)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #8749822e97ad8dda — Environment-variable access.

repo/examples/guides/hackathons/hackathon_sep_27/nutritional_content_analysis_swarm.py:83

api_key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2002868f00a00537 — Environment-variable access.

repo/examples/guides/mem0/mem0_and_swarms.py:12

MEM0_API_KEY = os.getenv("MEM0_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9b7b959e3c5fd3ab — Filesystem access.

repo/examples/guides/mem0/mem0_and_swarms.py:65

    with open(pdf_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4f5687922809af2f — Filesystem access.

repo/examples/guides/mem0/mem0_and_swarms.py:117

        with open(csv_path, newline="", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eaf8073ce5ecc251 — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:149

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ad3d05295acc1d37 — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:247

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ad323b9002f5ec1c — Environment-variable access.

repo/examples/guides/voice_agents/voice_agents_examples/google_calendar_agent.py:316

        access_token = os.getenv("GOOGLE_CALENDAR_ACCESS_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #91496811e6196788 — Environment-variable access.

repo/examples/guides/x402_examples/agent_integration/x402_agent_buying.py:39

    key = os.getenv("X402_PRIVATE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #639572716e82dd51 — Environment-variable access.

repo/examples/guides/x402_examples/memecoin_agent_x402.py:130

        pay_to_address=os.getenv(
            "WALLET_ADDRESS", "0xYourWalletAddress"
        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3ed49f04c41222e0 — Environment-variable access.

repo/examples/models/openai/5.4_openai.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #41d4d7b86b50f69c — Environment-variable access.

repo/examples/multi_agent/asb/auto_swarm_router.py:10

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #6550f4215cdd5b3f — Filesystem access.

repo/examples/multi_agent/council/judges/council_judge_evaluation.py:106

                with open(self.results_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2c657a31640f867e — Filesystem access.

repo/examples/multi_agent/council/judges/council_judge_evaluation.py:125

        with open(self.results_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ec957146ccdace03 — Filesystem access.

repo/examples/multi_agent/graphworkflow_examples/graph_workflow_serialization.py:75

with open(spec_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d4bcffd40b4d84e4 — Filesystem access.

repo/examples/multi_agent/graphworkflow_examples/graph_workflow_serialization.py:91

with open(spec_path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4af636ca435d327b — Environment-variable access.

repo/examples/multi_agent/groupchat/groupchat_examples/groupchat_example.py:14

    os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8a49e980682ebd55 — Environment-variable access.

repo/examples/multi_agent/hscf_examples/simple_hscf.py:8

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #f3ca4a03bdabe84a — Environment-variable access.

repo/examples/multi_agent/mar/model_router_example.py:7

model_router = ModelRouter(api_key=os.getenv("OPENAI_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #56d2fada24c06fb6 — Filesystem access.

repo/examples/multi_agent/paper_implementations/long_agent.py:59

        with open(file_path, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a523d3c6064b23a0 — Filesystem access.

repo/examples/multi_agent/paper_implementations/long_agent.py:84

        with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #bb4288e29c3823d1 — Filesystem access.

repo/examples/multi_agent/planner_generator_evaluator/pge_with_tools_example.py:31

    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #001cd15abd89d9fd — Filesystem access.

repo/examples/multi_agent/planner_generator_evaluator/pge_with_tools_example.py:48

    with open(path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #931c442f891e0ef6 — Environment-variable access.

repo/examples/multi_agent/sequential_workflow/sequential_workflow.py:9

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #03b8d1759953b569 — Filesystem access.

repo/examples/multi_agent/simulations/agent_map/agent_map_simulation.py:1230

            with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #af0d6c280621bdbe — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:124

            with open(xml_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3860c17051359666 — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:529

        with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #080abcee8c527f25 — Filesystem access.

repo/examples/multi_agent/simulations/euroswarm_parliament/wikipedia_personality_scraper.py:598

        with open(filepath, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9295823cde7a58d1 — Filesystem access.

repo/examples/multi_agent/spreadsheet_examples/spreadsheet_swarm_usage.py:68

    with open("agents.csv", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #9d68b6c254be4c1a — Filesystem access.

repo/examples/multi_agent/spreadsheet_examples/spreadsheet_swarm_usage.py:115

    with open("research_agents.csv", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #631ec5e3c3129dfe — Environment-variable access.

repo/examples/multi_agent/swarm_rearrange_examples/swarm_rearrange_demo.py:10

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d36134b98cdbe009 — Filesystem access.

repo/examples/multi_agent/swarm_router/swarm_router_test.py:68

with open("output.json", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #5ff895252723ec21 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #a1519e411eca8b34 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22

    response = requests.get(f"{BASE_URL}/health", headers=headers)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #822677d1a9be9e89 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22 · flow /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11 → /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:22

    response = requests.get(f"{BASE_URL}/health", headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low egress test-only #34cf1357c24887c5 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #c77ea71e45f17268 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74 · flow /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:11 → /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/hedge_fund_swarm.py:74

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #f00b8afe83b2b012 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #d7d592a60eef8539 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #792c1294593ba9f6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84 · flow /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:9 → /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/medical_swarm.py:84

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #2c98a9626e692a21 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/swarms_api_client.py:48

    api_key=os.getenv("SWARMS_API_KEY"), format_type="json"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1309b8b245af235c — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #a211f48e39fd39ac — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87

    response = requests.post(
        f"{BASE_URL}/swarm/completion",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #5e4a8402922ae35a — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87 · flow /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:9 → /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/swarms_api_example.py:87

    response = requests.post(
        f"{BASE_URL}/swarm/completion",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #ba1347841fc046c9 — Environment-variable access.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:9

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #229b45e078b97420 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #3884420dd8a8bb27 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119 · flow /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/tools_examples.py:9 → /tmp/closeopen-zrpxd3gl/repo/examples/multi_agent/swarms_api_examples/tools_examples.py:119

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=headers,
        json=payload,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #57fa4fabe4b31163 — Environment-variable access.

repo/examples/multi_agent/utils/agent_communication_examples.py:17

os.environ["OPENAI_API_KEY"] = "your-openai-api-key"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #29d8fb7c8b124dbd — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:51

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #6bf32a0a053a82db — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #0598c1b201cdbc6d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89 · flow /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:51 → /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/autonomous_agent.py:89

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #6d40c14dfb1e45cd — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:50

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #1f1383ed6f934103 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #b06647356693e94b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88 · flow /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:50 → /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/autonomous_agents/marketplace_and_auto_agent.py:88

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #e9303eaffb4657bd — Environment-variable access.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:63

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #d949bb610d37fca6 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #306575f6f8590536 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103 · flow /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:63 → /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/autonomy/handoffs/autonomous_agent_with_handoffs_example.py:103

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #52a750f42843f93f — Environment-variable access.

repo/examples/single_agent/capabilities/rag/full_agent_rag_example.py:15

api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8a06ed89e57c6744 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/pinecone_example.py:13

    api_key=os.getenv("PINECONE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #a86480ddb3193c1c — Environment-variable access.

repo/examples/single_agent/capabilities/rag/pinecone_example.py:14

    environment=os.getenv("PINECONE_ENVIRONMENT"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #3b83a64002707f6d — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_agent.py:167

    url=os.getenv("QDRANT_URL"),  # Optional: For cloud deployment

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #809fe15491fbe2b8 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_agent.py:168

    api_key=os.getenv(
        "QDRANT_API_KEY"
    ),  # Optional: For cloud deployment

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2ebbecb9d1fb4793 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_rag_example.py:17

    url=os.getenv("QDRANT_URL", "https://your-cluster.qdrant.io"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #eef1a4dedd4ea481 — Environment-variable access.

repo/examples/single_agent/capabilities/rag/qdrant_rag_example.py:18

    api_key=os.getenv("QDRANT_API_KEY", "your-api-key"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #991b6fc6019311a6 — Filesystem access.

repo/examples/single_agent/capabilities/rag/simple_example.py:100

        with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0aa48ad926214585 — Filesystem access.

repo/examples/single_agent/capabilities/skills/agent_with_custom_skill.py:52

with open("./my_custom_skills/customer-support/SKILL.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #aecf559d20dd709c — Environment-variable access.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:47

    api_key = os.getenv("EXA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #39da3130c0a38039 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #03c83fc2041c8114 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93 · flow /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/tools/agent_with_exa.py:47 → /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/tools/agent_with_exa.py:93

        response = httpx.post(
            "https://api.exa.ai/search",
            json=payload,
            headers=headers,
            timeout=30,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #6b5fa72838743838 — Environment-variable access.

repo/examples/single_agent/capabilities/tools/multi_tool_usage_agent.py:419

    openai_api_key=os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #f7320e53600ba2d9 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #dfdf29cbf3a1fb10 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:86

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #ab1d47bb4afef5d7 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/single_agent/capabilities/tools/new_tools_examples.py:147

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #ea2b63b93f6ce74c — Environment-variable access.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:11

api_token = os.getenv("REPLICATE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #826b04ffc41daeda — Environment-variable access.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:50

    api_token = os.getenv("REPLICATE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low pii_flow test-only Excluded from app score #21371559cd8cdbed — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:83 · flow /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:50 → /tmp/closeopen-zrpxd3gl/repo/examples/single_agent/capabilities/tools/omni_modal_agent.py:83

    response = requests.post(url, headers=headers, json=data)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #d56bc89db21a0f31 — Environment-variable access.

repo/examples/single_agent/demos/persistent_legal_agent.py:22

    api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #01c91a83a5656220 — Environment-variable access.

repo/examples/single_agent/demos/persistent_legal_agent.py:26

    api_key = os.getenv("GROQ_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #8450ed4d72b50520 — Filesystem access.

repo/examples/single_agent/demos/persistent_legal_agent.py:112

    with open("generated_term_sheet_draft.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #44785a362719e815 — Environment-variable access.

repo/examples/single_agent/getting_started/onboarding/onboard-basic.py:18

api_key = os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #546e1cecbbd2e57b — Environment-variable access.

repo/examples/single_agent/reasoning/reasoning_duo.py:12

    openai_api_key=os.getenv("TOGETHER_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #0f4768aebcd494f6 — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_basic_example.py:37

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4af699a0f54919c2 — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_config_access_example.py:32

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cf81566f4acce28c — Filesystem access.

repo/examples/single_agent/utils/autosaving_examples/autosave_recovery_example.py:43

    with open(config_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2739ab2fe2ed83cb — Environment-variable access.

repo/examples/single_agent/utils/custom_agent_base_url.py:19

    llm_api_key=os.getenv(
        "OPENROUTER_API_KEY"
    ),  # Use the correct Grok API key environment variable

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #72efe2ce98aa84dd — Filesystem access.

repo/examples/tools/agent_as_tools.py:38

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #4a28b4660bd647c8 — Filesystem access.

repo/examples/tools/agent_as_tools.py:139

    with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4d18039c649b4374 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/agent_as_tools.py:326

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #9ef422a9d4082a92 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:38

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #c66b686a7a1a8ffe — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:88

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #4d258d25640d155d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/base_tool_examples/conver_funcs_to_schema.py:149

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #a14e536287f5b959 — Filesystem access.

repo/examples/tools/base_tool_examples/test_base_tool_comprehensive.py:773

    with open("base_tool_test_report.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #d5210db092887016 — Filesystem access.

repo/examples/tools/base_tool_examples/test_base_tool_comprehensive_fixed.py:894

    with open("base_tool_test_report_fixed.md", "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #925b98f5060c0cec — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:38

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #07955e5629b351c2 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:88

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #b8f2b7027f70b66b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:149

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #1236cf561d843e53 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:205

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #d5c6d19a42884a7b — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:236

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #55250a6786fa29cc — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:301

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #7c2cd4db4cb086d8 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:327

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #27221faaec82c671 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/many_tool_use_demo.py:353

        response = requests.get(url, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #9060263538f7acac — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:36

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #3efc30e6afc8513d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:86

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low egress test-only #6aedc1f072757c81 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/multi_tool_use/multi_tool_anthropic.py:147

        response = requests.get(url, params=params, timeout=10)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #16ef5a0e8bc01fb7 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:64

    value = os.getenv(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #b40d28455c8c6c16 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/social_media/social_media_tools.py:167

        response = requests.post(
            "https://api.linkedin.com/v2/ugcPosts",
            headers={
                "Authorization": f"Bearer {token}",
                "X-Restli-Protocol-Version": "2.0.0",
                "Content-Type": "application/json",
            },
            json=body,
            timeout=15,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs test-only #4519b7472d91b501 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:236

                "categoryId": os.getenv("YOUTUBE_CATEGORY_ID", "22"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #dc3ec311b3da0485 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:239

                "privacyStatus": os.getenv(
                    "YOUTUBE_PRIVACY", "public"
                ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #7726235a3ea3a030 — Environment-variable access.

repo/examples/tools/social_media/social_media_tools.py:355

        title = os.getenv("DEVTO_TITLE") or _first_line(content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4d23cfc481e57ffa — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/tools/social_media/social_media_tools.py:356

        response = requests.post(
            "https://dev.to/api/articles",
            headers={
                "api-key": api_key,
                "Content-Type": "application/json",
            },
            json={
                "article": {
                    "title": title,
                    "body_markdown": content,
                    "published": True,
                }
            },
            timeout=20,
        )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #3f0a590929985dff — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/tools/social_media/social_media_tools.py:356 · flow /tmp/closeopen-zrpxd3gl/repo/examples/tools/social_media/social_media_tools.py:355 → /tmp/closeopen-zrpxd3gl/repo/examples/tools/social_media/social_media_tools.py:356

        response = requests.post(
            "https://dev.to/api/articles",
            headers={
                "api-key": api_key,
                "Content-Type": "application/json",
            },
            json={
                "article": {
                    "title": title,
                    "body_markdown": content,
                    "published": True,
                }
            },
            timeout=20,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #60f7e3c2ccfa2af3 — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:74

            or os.getenv("BROWSERBASE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #266fbcf894cee244 — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:76

            or os.getenv("BROWSERBASE_PROJECT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #ab8d0136e4b307c3 — Environment-variable access.

repo/examples/tools/stagehand/1_stagehand_wrapper_agent.py:79

            or os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #c177e9184acfe0c2 — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:51

                api_key=api_key or os.getenv("BROWSERBASE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #35e9f1a0a3515491 — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:53

                or os.getenv("BROWSERBASE_PROJECT_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e40e6da0956db137 — Environment-variable access.

repo/examples/tools/stagehand/2_stagehand_tools_agent.py:56

                or os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #1fe8ce3fb1598aca — Environment-variable access.

repo/examples/utils/swarms_api/agent_overview.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #10ac0c67637fdf84 — Environment-variable access.

repo/examples/utils/swarms_api/batch_example.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #78b3752879df0ff1 — Environment-variable access.

repo/examples/utils/swarms_api/client_example.py:8

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #e7d9c0d6e88af828 — Environment-variable access.

repo/examples/utils/swarms_api/hospital_team.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #cc0107bd7e88af3f — Environment-variable access.

repo/examples/utils/swarms_api/icd_ten_analysis.py:9

    api_key=os.getenv("SWARMS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs test-only #2980daa839cb6386 — Environment-variable access.

repo/examples/utils/swarms_api/legal_team.py:10

API_KEY = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress test-only #4198d48ec4e7a531 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/examples/utils/swarms_api/legal_team.py:24

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=HEADERS,
        json=swarm_config,
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low pii_flow test-only Excluded from app score #ac9e06453f0d1321 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration. Non-production path — not application runtime.

repo/examples/utils/swarms_api/legal_team.py:24 · flow /tmp/closeopen-zrpxd3gl/repo/examples/utils/swarms_api/legal_team.py:10 → /tmp/closeopen-zrpxd3gl/repo/examples/utils/swarms_api/legal_team.py:24

    response = requests.post(
        f"{BASE_URL}/v1/swarm/completions",
        headers=HEADERS,
        json=swarm_config,
    )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

low env_fs test-only #6ea779f90173df5b — Environment-variable access.

repo/examples/utils/swarms_api/rate_limits.py:7

client = SwarmsClient(api_key=os.getenv("SWARMS_API_KEY"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #23552e20bdae137d — Hardcoded external endpoint. Review what data is sent to this destination.

repo/scripts/examples.py:15

    response = requests.get(api_url)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #eef89d7893a45a8b — Filesystem access.

repo/scripts/llm_txt.py:39

        with open(output_path, "w", encoding="utf-8") as outfile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1eee7df84ebb34b9 — Filesystem access.

repo/scripts/llm_txt.py:44

                    with open(
                        md_file, "r", encoding="utf-8"
                    ) as infile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f01981c5668da6d8 — Filesystem access.

repo/swarms/agents/auto_generate_swarm_config.py:372

    with open(output_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f7917fe1cf7e4660 — Filesystem access.

repo/swarms/agents/create_agents_from_yaml.py:101

            with open(yaml_file, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4a270c02ca260090 — Filesystem access.

repo/swarms/artifacts/main_artifact.py:154

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0e78c3c2e2cdfb49 — Filesystem access.

repo/swarms/artifacts/main_artifact.py:161

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #114220506a07519e — Filesystem access.

repo/swarms/artifacts/main_artifact.py:197

        with open(file_path, "w") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #417f5e146757e9c7 — Filesystem access.

repo/swarms/artifacts/main_artifact.py:211

        with open(file_path, "r") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #02ca5e41b8ac4a84 — Environment-variable access.

repo/swarms/cli/main.py:1878

        existing = os.environ.get(env_var, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21747dd85c5f99b3 — Filesystem access.

repo/swarms/cli/main.py:1966

    env_path.write_text("\n".join(env_lines) + "\n")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #53837e8a9a146b9c — Environment-variable access.

repo/swarms/cli/main.py:1989

        if collected_keys.get(v) or os.environ.get(v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1fa5776f643890b7 — Environment-variable access.

repo/swarms/cli/utils.py:51

    if os.getenv("OPENAI_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4852b9f37853649d — Environment-variable access.

repo/swarms/cli/utils.py:53

    if os.getenv("ANTHROPIC_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #87ee1b5793f98417 — Environment-variable access.

repo/swarms/cli/utils.py:55

    if os.getenv("GROQ_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d9577c319b9d3863 — Environment-variable access.

repo/swarms/cli/utils.py:57

    if os.getenv("GOOGLE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ba74022aa34ea3b9 — Environment-variable access.

repo/swarms/cli/utils.py:59

    if os.getenv("COHERE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d2ee06df7b15dce0 — Environment-variable access.

repo/swarms/cli/utils.py:61

    if os.getenv("MISTRAL_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #da8d6b13ff8554d2 — Environment-variable access.

repo/swarms/cli/utils.py:63

    if os.getenv("TOGETHER_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7514b26c444064b5 — Filesystem access.

repo/swarms/cli/utils.py:193

            content = env_path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #0aa75110baa8c9a4 — Environment-variable access.

repo/swarms/cli/utils.py:277

        "OPENAI_API_KEY": os.getenv("OPENAI_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d6c4b27a54c2e2bd — Environment-variable access.

repo/swarms/cli/utils.py:278

        "ANTHROPIC_API_KEY": os.getenv("ANTHROPIC_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7cdb044b90a9db66 — Environment-variable access.

repo/swarms/cli/utils.py:279

        "GOOGLE_API_KEY": os.getenv("GOOGLE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5c72bf5b4702e512 — Environment-variable access.

repo/swarms/cli/utils.py:280

        "COHERE_API_KEY": os.getenv("COHERE_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b797e697d7c3434e — Filesystem access.

repo/swarms/cli/utils.py:512

        with open(cache_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f0de8a094c05969 — Filesystem access.

repo/swarms/cli/utils.py:522

        with open(cache_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #62bdf16a8c009d75 — Filesystem access.

repo/swarms/prompts/prompt.py:253

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #46360076d03e0aad — Filesystem access.

repo/swarms/structs/agent.py:1996

            with open(temp_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1122295161995253 — Filesystem access.

repo/swarms/structs/agent.py:3695

            with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4e5c276eeb8c40e5 — Filesystem access.

repo/swarms/structs/agent.py:4604

                with open(skill_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c645c2a85eff60bf — Filesystem access.

repo/swarms/structs/agent.py:4698

                    with open(
                        skill["path"], "r", encoding="utf-8"
                    ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #47bea1186aa6e65a — Filesystem access.

repo/swarms/structs/agent_loader.py:331

        with open(self.file_path, "w", newline="") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99f83cb7d9f90c08 — Filesystem access.

repo/swarms/structs/agent_loader.py:338

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4b96f58cc4241722 — Filesystem access.

repo/swarms/structs/agent_loader.py:343

        with open(self.file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8aae3b221db22ab9 — Filesystem access.

repo/swarms/structs/agent_loader.py:348

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #460ad2bacab54c4f — Filesystem access.

repo/swarms/structs/agent_loader.py:354

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d29f011a6c510c44 — Filesystem access.

repo/swarms/structs/agent_loader.py:359

        with open(self.file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d7a6413f8854a118 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:674

        with open(full_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #5aefbe0f08f12816 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:731

            with open(full_path, "a", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09ed93435530fdd7 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:735

            with open(full_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #45a5e3c2683764f5 — Filesystem access.

repo/swarms/structs/autonomous_loop_utils.py:784

        with open(full_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b1d1441c66261941 — Filesystem access.

repo/swarms/structs/base_structure.py:100

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff810c0316132ff7 — Filesystem access.

repo/swarms/structs/base_structure.py:112

        with open(file_path) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #388d4a8ae6e34c2e — Filesystem access.

repo/swarms/structs/base_structure.py:147

        with open(file_path, "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #01e6515627945a94 — Filesystem access.

repo/swarms/structs/base_structure.py:200

        with open(file, "a") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9f8bc1491285871c — Filesystem access.

repo/swarms/structs/base_swarm.py:606

            with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #606a61709d4e930b — Filesystem access.

repo/swarms/structs/base_swarm.py:622

            with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #90ac9c5e0d4d2072 — Filesystem access.

repo/swarms/structs/base_swarm.py:638

            with open(filename, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b47449ee03d55c78 — Filesystem access.

repo/swarms/structs/base_swarm.py:654

            with open(filename) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e622b69ba0ba495d — Environment-variable access.

repo/swarms/structs/concurrent_workflow.py:646

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6d436ff1c7696289 — Environment-variable access.

repo/swarms/structs/concurrent_workflow.py:650

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ddf3c2c05f75c662 — Filesystem access.

repo/swarms/structs/concurrent_workflow.py:706

                with open(
                    conversation_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c718718007ffc74e — Filesystem access.

repo/swarms/structs/conversation.py:225

            with open(conversation_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a16f0eb3f5ec5a46 — Filesystem access.

repo/swarms/structs/conversation.py:271

                with open(
                    self.memory_md_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9effc3c11894d258 — Filesystem access.

repo/swarms/structs/conversation.py:287

            with open(
                self.memory_md_path, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #18d2c0fe3cf34b50 — Filesystem access.

repo/swarms/structs/conversation.py:386

            with open(
                self.memory_md_path, "r", encoding="utf-8"
            ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #387d4e5f791c7201 — Filesystem access.

repo/swarms/structs/conversation.py:409

            with open(archive_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3792296f332ff7e8 — Filesystem access.

repo/swarms/structs/conversation.py:439

                with open(
                    self.memory_md_path, "a", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c450a53f1396c5e4 — Filesystem access.

repo/swarms/structs/conversation.py:688

            with open(filename, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #616370b8b3064537 — Filesystem access.

repo/swarms/structs/conversation.py:840

            with open(self.save_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1d6e7c69f9962563 — Filesystem access.

repo/swarms/structs/conversation.py:877

            with open(self.save_filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #09dc2a4a60fbf715 — Filesystem access.

repo/swarms/structs/conversation.py:944

                with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a60ca51cec92efe5 — Filesystem access.

repo/swarms/structs/conversation.py:977

                with open(filename, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b184e937b6eb07b5 — Filesystem access.

repo/swarms/structs/conversation.py:1413

                    with open(filepath) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ff27c36713b3dbb4 — Filesystem access.

repo/swarms/structs/dynamic_skills_loader.py:61

                with open(skill_file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e1ba183ae6305c61 — Filesystem access.

repo/swarms/structs/graph_workflow.py:1907

                                    checkpoint_path.read_text(
                                        encoding="utf-8"
                                    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #17b3fc7d2869e5c9 — Filesystem access.

repo/swarms/structs/graph_workflow.py:2173

                            checkpoint_path.write_text(
                                json.dumps(
                                    layer_outputs,
                                    indent=2,
                                    default=str,
                                ),
                                encoding="utf-8",
                            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d5814b3ae37ddab — Filesystem access.

repo/swarms/structs/graph_workflow.py:2767

        with open(path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #f0d7698d23e2126a — Filesystem access.

repo/swarms/structs/graph_workflow.py:3360

            with open(filepath, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1e226bbfc9b46093 — Filesystem access.

repo/swarms/structs/graph_workflow.py:3404

            with open(filepath, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6942e094b07d610f — Environment-variable access.

repo/swarms/structs/hiearchical_swarm.py:343

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #99a88b65fc877b6c — Environment-variable access.

repo/swarms/structs/hiearchical_swarm.py:347

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #4ecea69fd7ba3890 — Filesystem access.

repo/swarms/structs/hiearchical_swarm.py:402

                with open(
                    conversation_path, "w", encoding="utf-8"
                ) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a5000c7b9c5f2ea6 — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:335

            with open(self.shared_state_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e9cd61924bcf17cb — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:351

        with open(self.shared_state_path, "a") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2b2084e313df5894 — Filesystem access.

repo/swarms/structs/planner_generator_evaluator.py:368

        with open(self.shared_state_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ea8449841c933634 — Filesystem access.

repo/swarms/structs/safe_loading.py:185

            with open(file_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #9d4f5414c2b8813c — Filesystem access.

repo/swarms/structs/safe_loading.py:214

            with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #219f47a4455b0a85 — Environment-variable access.

repo/swarms/structs/sequential_workflow.py:520

            if not os.getenv("WORKSPACE_DIR"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #8ecabbafd9f1d964 — Environment-variable access.

repo/swarms/structs/sequential_workflow.py:524

                os.environ["WORKSPACE_DIR"] = default_workspace

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #6eebac78849213d9 — Filesystem access.

repo/swarms/structs/sequential_workflow.py:593

            with open(conversation_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #000bd97e27d4c9e7 — Filesystem access.

repo/swarms/structs/skill_orchestra.py:753

            with open(conv_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2f13bc58fd0898c0 — Filesystem access.

repo/swarms/structs/skill_orchestra.py:765

            with open(handbook_path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a18377313c6812b8 — Filesystem access.

repo/swarms/structs/spreadsheet_swarm.py:133

            with open(csv_path, mode="r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #678088b7fa0e2340 — Filesystem access.

repo/swarms/structs/spreadsheet_swarm.py:397

        with open(self.save_file_path, mode="a", newline="") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #19e1fcad2c6fbbd6 — Environment-variable access.

repo/swarms/structs/test_prompt_caching.py:121

    return any(os.getenv(name) for name in env_names)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #21a56138ba7cb800 — Environment-variable access.

repo/swarms/telemetry/bootup.py:12

        verbose = os.getenv("SWARMS_VERBOSE_GLOBAL", "False").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b6f4b194a5893256 — Environment-variable access.

repo/swarms/telemetry/bootup.py:22

        os.environ["WANDB_SILENT"] = "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #518469b8fcb7b40b — Environment-variable access.

repo/swarms/telemetry/bootup.py:27

        os.environ["WORKSPACE_DIR"] = str(workspace_path)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d1c690562f0afb30 — Environment-variable access.

repo/swarms/telemetry/main.py:132

    key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress production #9e4c0eb6acd945e1 — Hardcoded external endpoint. Review what data is sent to this destination.

repo/swarms/telemetry/main.py:139

    response = requests.post(
        url, json=payload, headers=headers, timeout=10
    )

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs production #003fb11135644760 — Environment-variable access.

repo/swarms/telemetry/main.py:164

    get_telemetry = os.getenv("SWARMS_TELEMETRY_ON")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a63b227f60242926 — Filesystem access.

repo/swarms/tools/computer_use.py:400

        data = real.read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #1cb6430dd1dd5819 — Filesystem access.

repo/swarms/tools/computer_use.py:648

    with open(tmp, mode, encoding=enc) as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #d049f7da472a1043 — Filesystem access.

repo/swarms/tools/computer_use.py:707

        with open(real, "a", encoding="utf-8") as fh:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #04e2f27c2697585a — Filesystem access.

repo/swarms/tools/computer_use.py:753

    text = real.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #7157aecd0305c9b9 — Environment-variable access.

repo/swarms/tools/computer_use.py:863

            for k, v in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #08b54e6678b9d6c7 — Environment-variable access.

repo/swarms/tools/computer_use.py:1040

        workspace_root = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a6551df193d3a1fa — Environment-variable access.

repo/swarms/tools/computer_use.py:1040

        workspace_root = os.environ.get(
            "COMPUTER_USE_WORKSPACE", workspace_root
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #e12d9227fbae933b — Filesystem access.

repo/swarms/utils/agent_loader_markdown.py:143

            with open(file_path, "r", encoding="utf-8") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #a65a96d00caafeda — Environment-variable access.

repo/swarms/utils/disable_logging.py:12

    os.environ["WORKSPACE_DIR"] = "agent_workspace"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #754b82f266fc12f2 — Environment-variable access.

repo/swarms/utils/disable_logging.py:17

    os.environ["TF_CPP_MIN_LOG_LEVEL"] = "3"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #2630c58f32e9bbd5 — Environment-variable access.

repo/swarms/utils/disable_logging.py:49

    workspace_dir = os.environ["WORKSPACE_DIR"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #c741ffbe908107ce — Filesystem access.

repo/swarms/utils/file_processing.py:97

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #03ce60b51664d40c — Filesystem access.

repo/swarms/utils/file_processing.py:125

        with open(file_path, "w") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #3f0457889be68313 — Filesystem access.

repo/swarms/utils/image_file_b64.py:135

        with open(image_source, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #b19d79f56c941172 — Filesystem access.

repo/swarms/utils/image_file_b64.py:249

        with open(file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #ac258719257cdfef — Filesystem access.

repo/swarms/utils/litellm_wrapper.py:89

        with open(audio_source, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #10ab65d24700556d — Environment-variable access.

repo/swarms/utils/swarms_marketplace_utils.py:30

    api_key = os.getenv("SWARMS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs production #15ab7a09ede70bb5 — Environment-variable access.

repo/swarms/utils/workspace_utils.py:31

    workspace_dir = os.getenv("WORKSPACE_DIR")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

</> Dependencies

litellm

python dependency

high pii_flow dependency Excluded from app score #3fd0634dbe495bdd — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:204

        return httpx.AsyncClient(
            transport=transport,
            event_hooks=event_hooks,
            timeout=timeout,
            limits=httpx.Limits(
                max_connections=concurrent_limit,
                max_keepalive_connections=concurrent_limit,
            ),
            verify=ssl_config,
            cert=cert,
            headers=headers,
        )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #2788030379a802d9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:680

            self.client = httpx.Client(
                transport=transport,
                timeout=timeout,
                limits=httpx.Limits(
                    max_connections=concurrent_limit,
                    max_keepalive_connections=concurrent_limit,
                ),
                verify=ssl_config,
                cert=cert,
                headers=headers,
            )

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #396335f4b5ec93b6 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:83

        response = httpx.get(path, headers=headers, params=params)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #68b6afddcc385de9 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:183

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #9c30e6ddee4cb1ec — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:242

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #bed67cea0a23938d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:371

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #c0f56a01ec459d79 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:438

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #8a748bf266c6a34e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:68 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:111

    base_url = httpx.URL(base_target_url)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #9ef05ca9f685250e — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:106 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:103

                    response=httpx.Response(
                        status_code=429,
                        content="{} rpm limit={}. current usage={}. id={}, model_group={}. Get the model info by calling 'router.get_model_info(id)".format(
                            RouterErrors.user_defined_ratelimit_error.value,
                            deployment_rpm,
                            local_result,
                            model_id,
                            deployment.get("model_name", ""),
                        ),
                        request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                    ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #b399a16d176fe65b — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:131 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:128

                        response=httpx.Response(
                            status_code=429,
                            content="{} rpm limit={}. current usage={}".format(
                                RouterErrors.user_defined_ratelimit_error.value,
                                deployment_rpm,
                                result,
                            ),
                            request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #c590df27cb0296e3 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:191 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:188

                    response=httpx.Response(
                        status_code=429,
                        content="{} rpm limit={}. current usage={}".format(
                            RouterErrors.user_defined_ratelimit_error.value,
                            deployment_rpm,
                            local_result,
                        ),
                        headers={"retry-after": str(60)},  # type: ignore
                        request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                    ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

high pii_flow dependency Excluded from app score #f953ca9291eafea1 — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:215 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:212

                        response=httpx.Response(
                            status_code=429,
                            content="{} rpm limit={}. current usage={}".format(
                                RouterErrors.user_defined_ratelimit_error.value,
                                deployment_rpm,
                                result,
                            ),
                            headers={"retry-after": str(60)},  # type: ignore
                            request=httpx.Request(method="tpm_rpm_limits", url="https://github.com/BerriAI/litellm"),  # type: ignore
                        ),

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

medium telemetry dependency Excluded from app score #56ae092618cc9a67 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/hooks/managed_files.py:50

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #33c7071b2de8d61e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/_service_logger.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cc127d8810e28e5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/base_cache.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bacb75c343810844 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/disk_cache.py:7

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2ddcfc936d4713b1 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/dual_cache.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e69118d6e155f81e — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/redis_cache.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #cbf7180a84335c41 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/caching/redis_cluster_cache.py:13

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1fa7c340d3a91bb5 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/_utils.py:9

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0c7998fbb57bf9df — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:18

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #531d2293a90f84ed — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:10

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #caef0183e8c23d95 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/custom_logger.py:32

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #40e42917d73d99d9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:16

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9bdd46c376866b49 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/langtrace.py:7

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #238307166e3624bb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:19

    from opentelemetry.sdk.trace.export import SpanExporter as _SpanExporter

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f51fc5df86c5c59f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:20

    from opentelemetry.trace import Context as _Context

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #176b21df3e35af48 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #baf1ffbebc643e35 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:22

    from opentelemetry.trace import Tracer as _Tracer

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0779a3d8ea8f656b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:54

    from opentelemetry.sdk.resources import OTELResourceDetector, Resource

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e8751dd05a88f997 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:96

        from opentelemetry.sdk.trace.export.in_memory_span_exporter import (
            InMemorySpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3896832b03ef4dd0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:124

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #02748a1f20c4f930 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:125

        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b9e1fb41e8f4ce12 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:126

        from opentelemetry.trace import SpanKind

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2fada8d7f3278beb — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:201

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b5039f51a29335a9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:202

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #02961db5cc081d5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:261

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b3b87461f1bec73f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:262

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ab12012f9f5548c0 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:323

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ed45a0dc46aff8f8 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:324

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #595576fe304c7c26 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:390

        from opentelemetry.sdk.trace import TracerProvider

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #570ae61790efe5cf — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:418

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #27e56d975e48d321 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:419

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #75f835c1b10b4c83 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:524

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2bdab08c990c1975 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:934

        from opentelemetry.trace.propagation.tracecontext import (
            TraceContextTextMapPropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b71ff48bc93cdb5b — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:945

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a5d248f785399c9c — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:946

        from opentelemetry.trace.propagation.tracecontext import (
            TraceContextTextMapPropagator,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #640109c303ae7b25 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:972

        from opentelemetry.exporter.otlp.proto.grpc.trace_exporter import (
            OTLPSpanExporter as OTLPSpanExporterGRPC,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #823d6770d8a22a0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:975

        from opentelemetry.exporter.otlp.proto.http.trace_exporter import (
            OTLPSpanExporter as OTLPSpanExporterHTTP,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a21e71eeded64ae6 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:978

        from opentelemetry.sdk.trace.export import (
            BatchSpanProcessor,
            ConsoleSpanExporter,
            SimpleSpanProcessor,
            SpanExporter,

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ba632c7dfd6674c4 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1065

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2d2ef09cb6543263 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1066

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #568cc4bd35b3e4cd — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1118

        from opentelemetry import trace

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #716946bb4f83acf7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:1119

        from opentelemetry.trace import Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #26c7fe7d9a4d1f0f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/traceloop.py:39

        from opentelemetry.semconv.ai import SpanAttributes

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #f59c32ce3a6951b7 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/integrations/traceloop.py:40

        from opentelemetry.trace import SpanKind, Status, StatusCode

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bf2dcfd238421124 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/core_helpers.py:11

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #9173d9c0ea342499 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3049

                    import sentry_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #c4e0fed363d238d2 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3055

                    import sentry_sdk

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #4a763c3033bd9b62 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3056

                from sentry_sdk.scrubber import EventScrubber

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #b913189470a88123 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3084

                    from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1e4c033c6b93c286 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3090

                    from posthog import Posthog

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bfb2c8ee0518cd53 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/litellm_core_utils/logging_utils.py:15

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #66634db135f2aa28 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/_types.py:54

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #e8b94665812f06ad — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/auth/auth_checks.py:60

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #bae9ef98e1d9a54a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/auth/auth_exception_handler.py:18

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3ad363e9ad6777fe — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #80be5cb9d33d6100 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter_v3.py:29

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #057dfc7ad86cab28 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:46

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #0c3cd66e6c64c5a9 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/proxy/utils.py:99

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ddd7f31d4fb2fc2a — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router.py:164

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #2a0366dba9e6eb90 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_strategy/lowest_latency.py:16

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #3613d087b8059c51 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_strategy/lowest_tpm_rpm_v2.py:21

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #ecb326e138038daa — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/cooldown_cache.py:14

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #1140bb610c1df6a3 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/cooldown_handlers.py:28

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #a448922bd6d0a45d — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/handle_error.py:12

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

medium telemetry dependency Excluded from app score #04b6b26e08ea6c59 — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/litellm/router_utils/prompt_caching_cache.py:14

    from opentelemetry.trace import Span as _Span

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 859 low-confidence finding(s)

low env_fs dependency Excluded from app score #ce755cd97d5921c4 — Environment-variable access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/aporia_ai.py:44

        self.aporia_api_key = api_key or os.environ["APORIO_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #819fcac631b32e8b — Environment-variable access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/aporia_ai.py:45

        self.aporia_api_base = api_base or os.environ["APORIO_API_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ae1f276f83d6ad8 — Filesystem access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/banned_keywords.py:34

                with open(banned_keywords_list, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #529aa0ed18892c70 — Filesystem access.

pkgs/python/[email protected]/enterprise/enterprise_hooks/blocked_user_list.py:35

                with open(blocked_user_list, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bbd613c8a138563 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/generic_api_callback.py:46

        endpoint = endpoint or os.getenv("GENERIC_LOGGER_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7df4eab83bdf3a63 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/generic_api_callback.py:82

        env_headers = os.getenv("GENERIC_LOGGER_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fe9f6ba636d18b9 — Filesystem access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/llama_guard.py:41

                with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d3fe9dc0feb6627 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/pagerduty/pagerduty.py:54

        _api_key = os.getenv("PAGERDUTY_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bc91233e2844cc5 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:124

        custom_logo = os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d265aa2b14446980 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:125

        custom_support = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e885f8cbc155057 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:126

        custom_signature = os.getenv("EMAIL_SIGNATURE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6e75f322416280d — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:127

        custom_subject_invitation = os.getenv("EMAIL_SUBJECT_INVITATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #768aaf9573a98e67 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:128

        custom_subject_key_created = os.getenv("EMAIL_SUBJECT_KEY_CREATED", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6722e5c2df5f3857 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/base_email.py:146

        base_url = os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")  # Not a premium feature

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #605d09a07eb52db1 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/enterprise_callbacks/send_emails/resend_email.py:26

        self.resend_api_key = os.getenv("RESEND_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62c999a744eca33e — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/auth/route_checks.py:17

        if "DISABLE_LLM_API_ENDPOINTS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c31484a99e0dcb8 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/auth/route_checks.py:35

        if "DISABLE_ADMIN_ENDPOINTS" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0279d9b9298c8268 — Environment-variable access.

pkgs/python/[email protected]/enterprise/litellm_enterprise/proxy/proxy_server.py:32

            docs_description = os.getenv("DOCS_DESCRIPTION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e56c6064c53e527b — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:95

litellm_mode = os.getenv("LITELLM_MODE", "DEV")  # "PRODUCTION", "DEV"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bc6476d193ea0ca — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:201

drop_params = bool(os.getenv("LITELLM_DROP_PARAMS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a629a4c565e9a6c5 — Environment-variable access.

pkgs/python/[email protected]/litellm/__init__.py:202

modify_params = bool(os.getenv("LITELLM_MODIFY_PARAMS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5a92c55bb204a2a — Environment-variable access.

pkgs/python/[email protected]/litellm/_logging.py:14

json_logs = bool(os.getenv("JSON_LOGS", False))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9eb206c8887253ac — Environment-variable access.

pkgs/python/[email protected]/litellm/_logging.py:16

log_level = os.getenv("LITELLM_LOG", "DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #904cd7edd4105da7 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:170

    if "REDIS_URL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01d481819ab242a7 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:171

        return os.environ["REDIS_URL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32b21e57a90a5569 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:173

    if "REDIS_HOST" not in os.environ or "REDIS_PORT" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0cba8b2cd0988f8 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:178

    if "REDIS_PASSWORD" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d12abd3f9c770139 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:179

        redis_password = f":{os.environ['REDIS_PASSWORD']}@"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ef4d4543e534d130 — Environment-variable access.

pkgs/python/[email protected]/litellm/_redis.py:184

        f"redis://{redis_password}{os.environ['REDIS_HOST']}:{os.environ['REDIS_PORT']}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25445b2f7a902cf0 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:113

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8885f503de639c2 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:114

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f551b0712b72fabc — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:120

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b34b8192a3966346 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:128

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #647c1adc9e0861fd — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:318

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #688946a62f10986d — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:319

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bfdfd2725312dc5 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:325

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af90be0d8221a121 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:333

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbb1d7bfec43cf74 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:495

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5686cbf85fb8066 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:496

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f2ff80ac0b3bd12 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:502

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fafff4091a372191 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:510

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d165345e5e02eb59 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:684

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08007019d9240228 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:685

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4031408241a76526 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:691

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9c84fb2d52eae43 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:699

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37b953069b474478 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:840

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd776ff3da28736b — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:841

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58757c1421593fe9 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:847

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dfaeb0669040831 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:855

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3264c2d082840ac — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1029

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b31de67a599aac0 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1030

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bb30cd811986b93 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1036

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f6bb3bf6d024ad61 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1044

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f2d6ac09a7975c49 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1191

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e2c56b7cba649ee — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1192

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a6a38bc48eed9df — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1198

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42570f6c9e6127cd — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1206

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c89d31b4f912fa7f — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1390

            or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8857876436a02811 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1391

            or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cd8552c4f971c157 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1397

            or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05024463e2bed1a9 — Environment-variable access.

pkgs/python/[email protected]/litellm/assistants/main.py:1405

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f36a3cb781d5a17a — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:160

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f32be60694c5a20c — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:161

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb0c38f4c39c42db — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:167

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #71468ddc874b41ae — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:175

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86f4199ff2525848 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:365

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ae245ad8e55abcc5 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:366

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84a54215b83db4a7 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:372

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efa1b05d7fa7b49c — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:380

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f734c555b6d048a6 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:540

            or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac34fe72469a2c38 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:564

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25072e3dac9262f4 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:565

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e63fef7f7be02b5a — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:571

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ec100294a269de0 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:722

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5f0b0bed821d8c7 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:723

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bcbfda16b2b60492 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:729

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8ac2247be1fed63 — Environment-variable access.

pkgs/python/[email protected]/litellm/batches/main.py:736

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #18987c9a5c066a1a — Filesystem access.

pkgs/python/[email protected]/litellm/budget_manager.py:55

                with open("user_cost.json", "r") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0d8c04b1b52d84e — Filesystem access.

pkgs/python/[email protected]/litellm/budget_manager.py:218

            with open("user_cost.json", "w") as json_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e2a2c470c617fc3 — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/qdrant_semantic_cache.py:71

            qdrant_api_base or os.getenv("QDRANT_URL") or os.getenv("QDRANT_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d96d41664b9892da — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/qdrant_semantic_cache.py:73

        qdrant_api_key = qdrant_api_key or os.getenv("QDRANT_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e61547a3d7215ad — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:94

                host = host or os.environ["REDIS_HOST"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30a5c4d0fb57b76e — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:95

                port = port or os.environ["REDIS_PORT"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91d7f596dff6e94b — Environment-variable access.

pkgs/python/[email protected]/litellm/caching/redis_semantic_cache.py:96

                password = password or os.environ["REDIS_PASSWORD"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3728bdea2047039 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:5

    os.getenv("AZURE_DEFAULT_RESPONSES_API_VERSION", "preview")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61ee2d578c645e1c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:7

ROUTER_MAX_FALLBACKS = int(os.getenv("ROUTER_MAX_FALLBACKS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f07a7e88e6d76ad — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:8

DEFAULT_BATCH_SIZE = int(os.getenv("DEFAULT_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62ff250590b2c814 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:9

DEFAULT_FLUSH_INTERVAL_SECONDS = int(os.getenv("DEFAULT_FLUSH_INTERVAL_SECONDS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4afd10d4637b9d9f — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:11

    os.getenv("DEFAULT_S3_FLUSH_INTERVAL_SECONDS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #549061446a96ede3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:13

DEFAULT_S3_BATCH_SIZE = int(os.getenv("DEFAULT_S3_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb78d782ad83182e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:15

    os.getenv("DEFAULT_SQS_FLUSH_INTERVAL_SECONDS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b28028ed5e30dac2 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:17

DEFAULT_SQS_BATCH_SIZE = int(os.getenv("DEFAULT_SQS_BATCH_SIZE", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e23c22913b60bf55 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:20

DEFAULT_MAX_RETRIES = int(os.getenv("DEFAULT_MAX_RETRIES", 2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd8771ea05dd1b97 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:21

DEFAULT_MAX_RECURSE_DEPTH = int(os.getenv("DEFAULT_MAX_RECURSE_DEPTH", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15e58e2a7f8d6d3a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:23

    os.getenv("DEFAULT_MAX_RECURSE_DEPTH_SENSITIVE_DATA_MASKER", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d1811b78593706b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:26

    os.getenv("DEFAULT_FAILURE_THRESHOLD_PERCENT", 0.5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb253bfafd587abd — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:28

DEFAULT_MAX_TOKENS = int(os.getenv("DEFAULT_MAX_TOKENS", 4096))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bb7d336da9f835b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:29

DEFAULT_ALLOWED_FAILS = int(os.getenv("DEFAULT_ALLOWED_FAILS", 3))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1202bb5ade421a69 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:30

DEFAULT_REDIS_SYNC_INTERVAL = int(os.getenv("DEFAULT_REDIS_SYNC_INTERVAL", 1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fff426f37df91f9d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:31

DEFAULT_COOLDOWN_TIME_SECONDS = int(os.getenv("DEFAULT_COOLDOWN_TIME_SECONDS", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38f27e5a6a8c3bf3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:33

    os.getenv("DEFAULT_REPLICATE_POLLING_RETRIES", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7829dd5786b146d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:36

    os.getenv("DEFAULT_REPLICATE_POLLING_DELAY_SECONDS", 1)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5a3472ff49ad3fb — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:38

DEFAULT_IMAGE_TOKEN_COUNT = int(os.getenv("DEFAULT_IMAGE_TOKEN_COUNT", 250))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1139f37a66b1c8f9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:39

DEFAULT_IMAGE_WIDTH = int(os.getenv("DEFAULT_IMAGE_WIDTH", 300))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feb53d547ab36558 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:40

DEFAULT_IMAGE_HEIGHT = int(os.getenv("DEFAULT_IMAGE_HEIGHT", 300))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b78f04c8c783ed97 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:42

    os.getenv("MAX_SIZE_PER_ITEM_IN_MEMORY_CACHE_IN_KB", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac277f18284c85d8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:45

    os.getenv("SINGLE_DEPLOYMENT_TRAFFIC_FAILURE_THRESHOLD", 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c62d539127a5bc0 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:49

    os.getenv("DEFAULT_REASONING_EFFORT_DISABLE_THINKING_BUDGET", 0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20a832d75fbba961 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:52

    os.getenv("DEFAULT_REASONING_EFFORT_LOW_THINKING_BUDGET", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97fca56848d1ccf3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:55

    os.getenv("DEFAULT_REASONING_EFFORT_MEDIUM_THINKING_BUDGET", 2048)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43ecbe986ae62f5f — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:58

    os.getenv("DEFAULT_REASONING_EFFORT_HIGH_THINKING_BUDGET", 4096)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7450d8669652d7ac — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:61

    os.getenv("MAX_TOKEN_TRIMMING_ATTEMPTS", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0b9240bca39948c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:73

MAX_REDIS_BUFFER_DEQUEUE_COUNT = int(os.getenv("MAX_REDIS_BUFFER_DEQUEUE_COUNT", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1506fc11cd6c9b4c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:74

MAX_SIZE_IN_MEMORY_QUEUE = int(os.getenv("MAX_SIZE_IN_MEMORY_QUEUE", 10000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dce1aa49d07a4913 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:76

    os.getenv("MAX_IN_MEMORY_QUEUE_FLUSH_COUNT", 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c28177af20655c10 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:80

    os.getenv("MINIMUM_PROMPT_CACHE_TOKEN_COUNT", 1024)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca20b03bae7b24b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:83

    os.getenv("DEFAULT_TRIM_RATIO", 0.75)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e1b63109d865f0c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:85

HOURS_IN_A_DAY = int(os.getenv("HOURS_IN_A_DAY", 24))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d67501841cc80614 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:86

DAYS_IN_A_WEEK = int(os.getenv("DAYS_IN_A_WEEK", 7))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58cbb221936ad432 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:87

DAYS_IN_A_MONTH = int(os.getenv("DAYS_IN_A_MONTH", 28))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b68fec8b68210b54 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:88

DAYS_IN_A_YEAR = int(os.getenv("DAYS_IN_A_YEAR", 365))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e1afabfdc7afbfd — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:90

    os.getenv("REPLICATE_MODEL_NAME_WITH_ID_LENGTH", 64)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d5b12107d3f1c98 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:93

FUNCTION_DEFINITION_TOKEN_COUNT = int(os.getenv("FUNCTION_DEFINITION_TOKEN_COUNT", 9))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4642693de3cf0e04 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:94

SYSTEM_MESSAGE_TOKEN_COUNT = int(os.getenv("SYSTEM_MESSAGE_TOKEN_COUNT", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c379d9399f44721d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:95

TOOL_CHOICE_OBJECT_TOKEN_COUNT = int(os.getenv("TOOL_CHOICE_OBJECT_TOKEN_COUNT", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e5c1fa70df59c3d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:97

    os.getenv("DEFAULT_MOCK_RESPONSE_PROMPT_TOKEN_COUNT", 10)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #430bd26e810cba7e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:100

    os.getenv("DEFAULT_MOCK_RESPONSE_COMPLETION_TOKEN_COUNT", 20)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #352313c20225904a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:103

    os.getenv("MAX_SHORT_SIDE_FOR_IMAGE_HIGH_RES", 768)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7970023f6d3b6a72 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:106

    os.getenv("MAX_LONG_SIDE_FOR_IMAGE_HIGH_RES", 2000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ac6db9a99619e41 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:108

MAX_TILE_WIDTH = int(os.getenv("MAX_TILE_WIDTH", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81a46fabb5205cf9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:109

MAX_TILE_HEIGHT = int(os.getenv("MAX_TILE_HEIGHT", 512))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f1670503470c484 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:111

    os.getenv("OPENAI_FILE_SEARCH_COST_PER_1K_CALLS", 2.5 / 1000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f9f4df418dd2db3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:116

    os.getenv("AZURE_FILE_SEARCH_COST_PER_GB_PER_DAY", 0.1)  # $0.1 USD per 1 GB/Day

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #661b53cea1ad1a5a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:119

    os.getenv(
        "AZURE_CODE_INTERPRETER_COST_PER_SESSION", 0.03
    )  # $0.03 USD per 1 Session

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eeff8c1ea0c10d23 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:124

    os.getenv(
        "AZURE_COMPUTER_USE_INPUT_COST_PER_1K_TOKENS", 3.0
    )  # $0.003 USD per 1K Tokens

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #288d71aa3e356032 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:129

    os.getenv(
        "AZURE_COMPUTER_USE_OUTPUT_COST_PER_1K_TOKENS", 12.0
    )  # $0.012 USD per 1K Tokens

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #608a097ac120e808 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:134

    os.getenv(
        "AZURE_VECTOR_STORE_COST_PER_GB_PER_DAY", 0.1
    )  # $0.1 USD per 1 GB/Day (same as file search)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #756cdc91936f22ae — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:138

MIN_NON_ZERO_TEMPERATURE = float(os.getenv("MIN_NON_ZERO_TEMPERATURE", 0.0001))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa72f6de7ef4cb8e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:141

    os.getenv("REPEATED_STREAMING_CHUNK_LIMIT", 100)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b2c11685c4d83b4 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:143

DEFAULT_MAX_LRU_CACHE_SIZE = int(os.getenv("DEFAULT_MAX_LRU_CACHE_SIZE", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6551689083d44db0 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:144

INITIAL_RETRY_DELAY = float(os.getenv("INITIAL_RETRY_DELAY", 0.5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df35cc18b39d13b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:145

MAX_RETRY_DELAY = float(os.getenv("MAX_RETRY_DELAY", 8.0))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bebf093938971ac — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:146

JITTER = float(os.getenv("JITTER", 0.75))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #51f1bca5253eaf53 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:148

    os.getenv("DEFAULT_IN_MEMORY_TTL", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #400e9e55ee38cfe0 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:151

    os.getenv("DEFAULT_POLLING_INTERVAL", 0.03)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81051a1576532daf — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:153

AZURE_OPERATION_POLLING_TIMEOUT = int(os.getenv("AZURE_OPERATION_POLLING_TIMEOUT", 120))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0466f7712e54c2af — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:154

REDIS_SOCKET_TIMEOUT = float(os.getenv("REDIS_SOCKET_TIMEOUT", 0.1))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5280e41f4fdd6e07 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:155

REDIS_CONNECTION_POOL_TIMEOUT = int(os.getenv("REDIS_CONNECTION_POOL_TIMEOUT", 5))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d668753b615afc56 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:157

    os.getenv("NON_LLM_CONNECTION_TIMEOUT", 15)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01d29b28be86b1c7 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:159

MAX_EXCEPTION_MESSAGE_LENGTH = int(os.getenv("MAX_EXCEPTION_MESSAGE_LENGTH", 2000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36138c5174c42d0e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:160

MAX_STRING_LENGTH_PROMPT_IN_DB = int(os.getenv("MAX_STRING_LENGTH_PROMPT_IN_DB", 1000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0c5452090b36fa1 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:161

BEDROCK_MAX_POLICY_SIZE = int(os.getenv("BEDROCK_MAX_POLICY_SIZE", 75))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11eaec4c25c217fc — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:163

    os.getenv("REPLICATE_POLLING_DELAY_SECONDS", 0.5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efcaabaa167c0be3 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:166

    os.getenv("DEFAULT_ANTHROPIC_CHAT_MAX_TOKENS", 4096)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67fecd45d1cf8b9e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:168

TOGETHER_AI_4_B = int(os.getenv("TOGETHER_AI_4_B", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7239f26b18ad5b81 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:169

TOGETHER_AI_8_B = int(os.getenv("TOGETHER_AI_8_B", 8))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db8f8c1dcd71b75d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:170

TOGETHER_AI_21_B = int(os.getenv("TOGETHER_AI_21_B", 21))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32e1b0061b79ac81 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:171

TOGETHER_AI_41_B = int(os.getenv("TOGETHER_AI_41_B", 41))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27202cedca73bab6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:172

TOGETHER_AI_80_B = int(os.getenv("TOGETHER_AI_80_B", 80))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c08e4a51aef337a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:173

TOGETHER_AI_110_B = int(os.getenv("TOGETHER_AI_110_B", 110))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dba33f7c68bd5afb — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:174

TOGETHER_AI_EMBEDDING_150_M = int(os.getenv("TOGETHER_AI_EMBEDDING_150_M", 150))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee226bbff3434343 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:175

TOGETHER_AI_EMBEDDING_350_M = int(os.getenv("TOGETHER_AI_EMBEDDING_350_M", 350))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31dc8319c835a21c — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:176

QDRANT_SCALAR_QUANTILE = float(os.getenv("QDRANT_SCALAR_QUANTILE", 0.99))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #025d7a44736d1207 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:177

QDRANT_VECTOR_SIZE = int(os.getenv("QDRANT_VECTOR_SIZE", 1536))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e86b72c33069f56 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:178

CACHED_STREAMING_CHUNK_DELAY = float(os.getenv("CACHED_STREAMING_CHUNK_DELAY", 0.02))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a175db23b1bbe70b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:180

    os.getenv("MAX_SIZE_PER_ITEM_IN_MEMORY_CACHE_IN_KB", 512)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e0cd5ab99369e51 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:182

DEFAULT_MAX_TOKENS_FOR_TRITON = int(os.getenv("DEFAULT_MAX_TOKENS_FOR_TRITON", 2000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67a3d4dc108c616e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:184

request_timeout: float = float(os.getenv("REQUEST_TIMEOUT", 6000))  # time in seconds

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #394e813cb8fad819 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:189

    os.getenv("DEFAULT_REPLICATE_GPU_PRICE_PER_SECOND", 0.001400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4efd8867184c7e68 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:191

FIREWORKS_AI_56_B_MOE = int(os.getenv("FIREWORKS_AI_56_B_MOE", 56))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0019e67faafc3d0 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:192

FIREWORKS_AI_176_B_MOE = int(os.getenv("FIREWORKS_AI_176_B_MOE", 176))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac9ce7885458141a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:193

FIREWORKS_AI_4_B = int(os.getenv("FIREWORKS_AI_4_B", 4))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #557c6758719ab8e7 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:194

FIREWORKS_AI_16_B = int(os.getenv("FIREWORKS_AI_16_B", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b85fdcf8f0a3ce6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:195

FIREWORKS_AI_80_B = int(os.getenv("FIREWORKS_AI_80_B", 80))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5672fa8e5a555b43 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:199

    os.getenv("MAX_LANGFUSE_INITIALIZED_CLIENTS", 50)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5da8b3c11530f238 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:201

DD_TRACER_STREAMING_CHUNK_YIELD_RESOURCE = os.getenv(
    "DD_TRACER_STREAMING_CHUNK_YIELD_RESOURCE", "streaming.chunk.yield"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #78dd180682f4b611 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:827

    os.getenv("HUMANLOOP_PROMPT_CACHE_TTL_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59068cfae27f9f3e — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:834

    os.getenv("PROMETHEUS_BUDGET_METRICS_REFRESH_INTERVAL_MINUTES", 5)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0bd11cee2d9b682 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:837

MAXIMUM_TRACEBACK_LINES_TO_LOG = int(os.getenv("MAXIMUM_TRACEBACK_LINES_TO_LOG", 100))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95547ddf63d9b226 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:848

    os.getenv("MAX_SPENDLOG_ROWS_TO_QUERY", 1_000_000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e1a95452f352c4d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:851

    os.getenv("DEFAULT_SOFT_BUDGET", 50.0)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afa07d68f0c9f933 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:869

    os.getenv("BATCH_STATUS_POLL_INTERVAL_SECONDS", 3600)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfe1fe0769c7eb4d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:872

    os.getenv("BATCH_STATUS_POLL_MAX_ATTEMPTS", 24)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #823543a75f81918f — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:876

    os.getenv("HEALTH_CHECK_TIMEOUT_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #957a1adf43b285a8 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:891

SPEND_LOG_RUN_LOOPS = int(os.getenv("SPEND_LOG_RUN_LOOPS", 500))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8dd8a7f1dbf2e49 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:892

SPEND_LOG_CLEANUP_BATCH_SIZE = int(os.getenv("SPEND_LOG_CLEANUP_BATCH_SIZE", 1000))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34f84bb7433a6f8b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:894

    os.getenv("DEFAULT_CRON_JOB_LOCK_TTL_SECONDS", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b876bd82862fff48 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:897

    os.getenv("PROXY_BUDGET_RESCHEDULER_MIN_TIME", 597)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20d5f3d2de6836c9 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:899

PROXY_BATCH_POLLING_INTERVAL = int(os.getenv("PROXY_BATCH_POLLING_INTERVAL", 3600))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5788b0cf7da31da6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:901

    os.getenv("PROXY_BUDGET_RESCHEDULER_MAX_TIME", 605)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7961d0077221ed45 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:903

PROXY_BATCH_WRITE_AT = int(os.getenv("PROXY_BATCH_WRITE_AT", 10))  # in seconds

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc65f22aa02aab0a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:905

    os.getenv("DEFAULT_HEALTH_CHECK_INTERVAL", 300)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b4e048d22056a5d — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:908

    os.getenv("PROMETHEUS_FALLBACK_STATS_SEND_TIME_HOURS", 9)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f4f5c93c2cd1acc — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:911

    os.getenv("DEFAULT_MODEL_CREATED_AT_TIME", 1677610602)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6649a40b5870ffd — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:914

    os.getenv("DEFAULT_SLACK_ALERTING_THRESHOLD", 300)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cee6e54e2afa2a31 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:916

MAX_TEAM_LIST_LIMIT = int(os.getenv("MAX_TEAM_LIST_LIMIT", 20))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a66b0a6ede1b3bd6 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:918

    os.getenv("DEFAULT_PROMPT_INJECTION_SIMILARITY_THRESHOLD", 0.7)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebe2d94a4ce94c47 — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:920

LENGTH_OF_LITELLM_GENERATED_KEY = int(os.getenv("LENGTH_OF_LITELLM_GENERATED_KEY", 16))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3b93303f45cb432a — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:922

    os.getenv("SECRET_MANAGER_REFRESH_INTERVAL", 86400)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb15a43a9e1a8d1b — Environment-variable access.

pkgs/python/[email protected]/litellm/constants.py:931

    os.getenv("DEFAULT_MANAGEMENT_OBJECT_IN_MEMORY_CACHE_TTL", 60)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06168df4247311d7 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:168

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ab7d64c8c66ac8b — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:169

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #04248cc9f1a0b96a — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:175

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f217d69ca637fb52 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:183

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e5480073b85766e — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:348

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ebb436ccc365764d — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:349

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #24dd6e4c79fecf46 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:355

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c61fbd5c309491c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:363

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #633da9333b420a95 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:502

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1e716cd5860eee2 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:503

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #28ebacd82602c5fa — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:509

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f8c3d27f9f48513 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:517

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #995358aebe80e703 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:656

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e98e9b8c2bf9d119 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:657

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6f4b3c89f90eabe9 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:663

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c29a33cac0a36176 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:671

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3f7d146a3fc8dcd — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:830

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2d1846b98e32ae4 — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:831

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f98d3847ccf7510f — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:837

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a26d85fd8cea47f — Environment-variable access.

pkgs/python/[email protected]/litellm/files/main.py:845

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a6216dc57f27e36 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:142

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e3ba6acaa0a02f1 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:143

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1d29ea0d01b57e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:149

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a887d110784aa4a — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:157

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f846c89ba825addf — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:366

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa5e4b40b30928df — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:367

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cefc1922e8e8f4ca — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:373

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #17e315ec71569444 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:381

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c680c15da171737 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:528

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90a9ff9af6d9f694 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:529

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2665ae473ce9c41a — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:535

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9502b6cb07b90976 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:543

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be875cec13054f07 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:685

                or os.getenv("OPENAI_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9e806b3d624a7b9e — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:686

                or os.getenv("OPENAI_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79bd074d3df6e503 — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:692

                or os.getenv("OPENAI_ORGANIZATION", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07de570b117c4c1d — Environment-variable access.

pkgs/python/[email protected]/litellm/fine_tuning/main.py:699

                or os.getenv("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d944ac2159b4e187 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1063

    base_url={os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f320d51add6feb4c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1108

        webhook_url = os.getenv("WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91641b62b4fedf2b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1157

            email_logo_url = os.getenv(
                "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f53681f938434a3b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1158

                "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #070806a852a246a0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1160

            email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aba238ac7062b6fe — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1186

            base_url = os.getenv("PROXY_BASE_URL", "http://0.0.0.0:4000")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba7c49f5437392eb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1259

        email_logo_url = os.getenv(
            "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c11f32ce9229007 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1260

            "SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3bb695714780f334 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1262

        email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52617a43657e9fc6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1369

        _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70c9a40d5cee3c43 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/SlackAlerting/slack_alerting.py:1397

            slack_webhook_url = os.getenv("SLACK_WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a41fe1343ca285f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:22

            api_key=os.getenv("AGENTOPS_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba48ce61a3865495 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:23

            service_name=os.getenv("AGENTOPS_SERVICE_NAME", "agentops"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baa7da5b0fc9f1bb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/agentops/agentops.py:24

            deployment_environment=os.getenv("AGENTOPS_ENVIRONMENT", "production"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c438c60e274a3a94 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:63

            float(os.getenv("ARGILLA_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5eb2baa46e1880c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:64

            if os.getenv("ARGILLA_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de4e8522e360461c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:65

            and os.getenv("ARGILLA_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a7e4e318dc6e4b30 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:73

            os.getenv("ARGILLA_BATCH_SIZE", None) or litellm.argilla_batch_size

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d263e2f2405f2d4 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:101

        _credentials_api_key = argilla_api_key or os.getenv("ARGILLA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #379ba0db64fb20b8 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:107

            or os.getenv("ARGILLA_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5ca6f3620481dc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:117

            or os.getenv("ARGILLA_DATASET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #37dccf61523447ff — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:238

                float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #638bbb31526119c2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:239

                if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c01baa62d6bcf38 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/argilla.py:240

                and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #15343f7fbacbc6ea — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:50

        space_key = os.environ.get("ARIZE_SPACE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8c71ab5f3146c14 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:51

        api_key = os.environ.get("ARIZE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f711a2d50f53676 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:53

        grpc_endpoint = os.environ.get("ARIZE_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf3c2e3651e71a8e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize.py:54

        http_endpoint = os.environ.get("ARIZE_HTTP_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bc153813d92d38c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:42

        api_key = os.environ.get("PHOENIX_API_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #149b3cd14ebcdb85 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:43

        grpc_endpoint = os.environ.get("PHOENIX_COLLECTOR_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #accc5ba7c94d53fc — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/arize/arize_phoenix.py:44

        http_endpoint = os.environ.get("PHOENIX_COLLECTOR_HTTP_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a722c48c1a5f259 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/athina.py:10

        self.athina_api_key = os.getenv("ATHINA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fec93fab5d20e9da — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/athina.py:16

            os.getenv("ATHINA_BASE_URL", "https://log.athina.ai")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f8f57cd71d9cad9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:32

            self.tenant_id = os.getenv("AZURE_STORAGE_TENANT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b55a8b885052f25f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:33

            self.client_id = os.getenv("AZURE_STORAGE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40c7a998b5efb156 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:34

            self.client_secret = os.getenv("AZURE_STORAGE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30feabddb6dcc828 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:35

            self.azure_storage_account_key: Optional[str] = os.getenv(
                "AZURE_STORAGE_ACCOUNT_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bffca63517d623da — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:40

            _azure_storage_account_name = os.getenv("AZURE_STORAGE_ACCOUNT_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #638003a90d6558d4 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/azure_storage/azure_storage.py:46

            _azure_storage_file_system = os.getenv("AZURE_STORAGE_FILE_SYSTEM")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ea786795645dc5e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:41

        self.api_base = api_base or os.getenv("BRAINTRUST_API_BASE") or API_BASE

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b64c9a6b074a71ef — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:43

        self.api_key: str = api_key or os.getenv("BRAINTRUST_API_KEY")  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6089dc1ac4fc557a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/braintrust_logging.py:64

        if api_key is None and os.getenv("BRAINTRUST_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1198f6d07be01491 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:29

        self.api_key = api_key or os.getenv("CLOUDZERO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e980f015db495d4e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:30

        self.connection_id = connection_id or os.getenv("CLOUDZERO_CONNECTION_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76d538a4b134bd2c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/cloudzero/cloudzero.py:31

        self.timezone = timezone or os.getenv("CLOUDZERO_TIMEZONE", "UTC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a5559c04d9701ce — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:70

            if os.getenv("DD_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13b579e7f68193e5 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:72

            if os.getenv("DD_SITE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77dadfffa7f17275 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:77

            self.DD_API_KEY = os.getenv("DD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3d26f3d261370e4e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:79

                f"https://http-intake.logs.{os.getenv('DD_SITE')}/api/v2/logs"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34e28a9c67f40582 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:85

                os.getenv("_DATADOG_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3203e0313f8b1abb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:86

                or os.getenv("DATADOG_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4afbf713e2ee0cd1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:87

                or os.getenv("DD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3847eb16991a98d8 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:505

            "env": os.getenv("DD_ENV", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c306d46ec1f980f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:506

            "service": os.getenv("DD_SERVICE", "litellm"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56c55c95f4ef7066 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:507

            "version": os.getenv("DD_VERSION", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #494695c9aab366a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:509

            "POD_NAME": os.getenv("POD_NAME", "unknown"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc687270a17e0829 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:525

        return os.getenv("DD_SOURCE", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0e22ebe0c0f43348 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:529

        return os.getenv("DD_SERVICE", "litellm-server")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #09d8dd303f2aa0a5 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:533

        return os.getenv("HOSTNAME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88ecf8046d549bfa — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:537

        return os.getenv("DD_ENV", "unknown")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a823e98717967b98 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog.py:541

        return os.getenv("POD_NAME", "unknown")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61ad2d979b7cf8b2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:42

            if os.getenv("DD_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #303345fd1dbdd36c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:44

            if os.getenv("DD_SITE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a2f9caf99e1e444 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:52

            self.DD_API_KEY = os.getenv("DD_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c93ed6aac4f479fb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:53

            self.DD_SITE = os.getenv("DD_SITE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3290233016a78b6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/datadog/datadog_llm_obs.py:59

            dd_base_url = os.getenv("DD_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8daaefffa193e607 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/deepeval/deepeval.py:24

        api_key = os.getenv("CONFIDENT_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #811724c95d79adde — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/deepeval/deepeval.py:25

        self.litellm_environment = os.getenv("LITELM_ENVIRONMENT", "development")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb2b0d315bf42414 — Filesystem access.

pkgs/python/[email protected]/litellm/integrations/dotprompt/prompt_manager.py:153

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9f329f2d2a76d11 — Filesystem access.

pkgs/python/[email protected]/litellm/integrations/dotprompt/prompt_manager.py:295

        content = file_path.read_text(encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e3c36a58633851b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/dynamodb.py:20

            "dynamodb", region_name=os.environ["AWS_REGION_NAME"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbe7e1ff50e6ac5b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/email_alerting.py:82

    email_logo_url = os.getenv("SMTP_SENDER_LOGO", os.getenv("EMAIL_LOGO_URL", None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0445b38aaa77a8ea — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/email_alerting.py:83

    email_support_contact = os.getenv("EMAIL_SUPPORT_CONTACT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3519efd56030b69 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:40

        self.base_url = os.getenv("GALILEO_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0eec32777731ce99 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:41

        self.project_id = os.getenv("GALILEO_PROJECT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a6b8a7e3d7eaf37 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:59

                "username": os.getenv("GALILEO_USERNAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #03706d5dc9d59eff — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/galileo.py:60

                "password": os.getenv("GALILEO_PASSWORD"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #599a8007f60ca0cb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket.py:31

        self.batch_size = int(os.getenv("GCS_BATCH_SIZE", GCS_DEFAULT_BATCH_SIZE))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c28c1cefae70476b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket.py:33

            os.getenv("GCS_FLUSH_INTERVAL", GCS_DEFAULT_FLUSH_INTERVAL_SECONDS)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfd4ee6b93357021 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:26

        _path_service_account = os.getenv("GCS_PATH_SERVICE_ACCOUNT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa1e0dae02916557 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:27

        _bucket_name = bucket_name or os.getenv("GCS_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a505fe60bac40b11 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_bucket/gcs_bucket_base.py:77

        project_id = os.getenv("GOOGLE_SECRET_MANAGER_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #600db4e6d191a3d5 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:55

        self.project_id = project_id or os.getenv("GCS_PUBSUB_PROJECT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ee6c94d1f579514 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:56

        self.topic_id = topic_id or os.getenv("GCS_PUBSUB_TOPIC_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca29e61254dba0a2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/gcs_pubsub/pub_sub.py:57

        self.path_service_account_json = credentials_path or os.getenv(
            "GCS_PATH_SERVICE_ACCOUNT"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b7b396eb96a09c8 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/greenscale.py:12

        self.greenscale_api_key = os.getenv("GREENSCALE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a00e1c96af428359 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/greenscale.py:17

        self.greenscale_logging_url = os.getenv("GREENSCALE_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #711dcf1e85c3a9de — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/helicone.py:26

        self.key = os.getenv("HELICONE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb3ee435251ef018 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/helicone.py:27

        self.api_base = os.getenv("HELICONE_API_BASE") or "https://api.hconeai.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7b8205e39460216 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:53

        if os.getenv("LAGO_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a4a21e12963c1861 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:56

        if os.getenv("LAGO_API_BASE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9144d12f54c56787 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:59

        if os.getenv("LAGO_API_EVENT_CODE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6f397580ce4b095 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:92

        if os.getenv("LAGO_API_CHARGE_BY", None) is not None and isinstance(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7054acc51484f75 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:93

            os.environ["LAGO_API_CHARGE_BY"], str

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1bb03c819fb6dd6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:95

            if os.environ["LAGO_API_CHARGE_BY"] in [

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b1fc2056c41457e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:100

                charge_by = os.environ["LAGO_API_CHARGE_BY"]  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6e0c572eb613586 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:122

                "code": os.getenv("LAGO_API_EVENT_CODE"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1787dfb05daafb63 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:133

        _url = os.getenv("LAGO_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df27ee41f8a97626 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:142

        api_key = os.getenv("LAGO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b51b7ea45a4491e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:167

            _url = os.getenv("LAGO_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c8602e729f031666 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/lago.py:178

            api_key = os.getenv("LAGO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dfe120f39887c712 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:57

        self.secret_key = langfuse_secret or os.getenv("LANGFUSE_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ee3c1c019dde6c6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:58

        self.public_key = langfuse_public_key or os.getenv("LANGFUSE_PUBLIC_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7acf67ff797f8214 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:59

        self.langfuse_host = langfuse_host or os.getenv(
            "LANGFUSE_HOST", "https://cloud.langfuse.com"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b563f008d7ac9f7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:68

        self.langfuse_release = os.getenv("LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9a3fb67c91fd3a0 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:69

        self.langfuse_debug = os.getenv("LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2d4e45e9a24685ae — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:95

            os.environ["LANGFUSE_PROJECT_ID"] = project_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06334a20ea6ad052 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:99

        if os.getenv("UPSTREAM_LANGFUSE_SECRET_KEY") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #67cf096889cbe9f1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:105

            self.upstream_langfuse_secret_key = os.getenv(
                "UPSTREAM_LANGFUSE_SECRET_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a8bbcb281744b50 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:108

            self.upstream_langfuse_public_key = os.getenv(
                "UPSTREAM_LANGFUSE_PUBLIC_KEY"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ff61a2e3edff8ba — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:111

            self.upstream_langfuse_host = os.getenv("UPSTREAM_LANGFUSE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86c29f27ea57ba5e — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:112

            self.upstream_langfuse_release = os.getenv("UPSTREAM_LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f5e1fb64352a195 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:113

            self.upstream_langfuse_debug = os.getenv("UPSTREAM_LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bd47a1365ea127a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:618

                proxy_base_url = os.environ.get("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #426c6510d4bd1861 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse.py:836

        return int(os.getenv("LANGFUSE_FLUSH_INTERVAL") or flush_interval)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7bf5b0e16b5e616b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:101

        langfuse_environment = os.environ.get("LANGFUSE_TRACING_ENVIRONMENT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa691b42d12e2d36 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:153

        return os.environ.get("LANGFUSE_OTEL_HOST") or os.environ.get("LANGFUSE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee99926d4143e09c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:171

        public_key = os.environ.get("LANGFUSE_PUBLIC_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e2c92ce186bf5e44 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:172

        secret_key = os.environ.get("LANGFUSE_SECRET_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #003afd8d29a10920 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:200

        os.environ["OTEL_EXPORTER_OTLP_ENDPOINT"] = endpoint

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a11fc88279c16f5b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_otel.py:201

        os.environ["OTEL_EXPORTER_OTLP_HEADERS"] = otlp_auth_headers

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2d893021502eb6c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:75

        langfuse_secret or langfuse_secret_key or os.getenv("LANGFUSE_SECRET_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d09f3477c979e074 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:77

    public_key = langfuse_public_key or os.getenv("LANGFUSE_PUBLIC_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5161a8dac868eb99 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:78

    langfuse_host = langfuse_host or os.getenv(
        "LANGFUSE_HOST", "https://cloud.langfuse.com"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7106a4ac3a15317c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:88

    langfuse_release = os.getenv("LANGFUSE_RELEASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c180c44a2ca519c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langfuse/langfuse_prompt_management.py:89

    langfuse_debug = os.getenv("LANGFUSE_DEBUG")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b7dcc4919560a7a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:52

            float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcafec59ee53d4a9 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:53

            if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bb8da34801751fb — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:54

            and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9a424a13203c5bd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:57

        self.langsmith_default_run_name = os.getenv(
            "LANGSMITH_DEFAULT_RUN_NAME", "LLMRun"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88b9ab09c7a89da7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:64

            os.getenv("LANGSMITH_BATCH_SIZE", None) or litellm.langsmith_batch_size

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb5646406622abf1 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:78

        _credentials_api_key = langsmith_api_key or os.getenv("LANGSMITH_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cdcf3feded914849 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:84

            langsmith_project or os.getenv("LANGSMITH_PROJECT") or "litellm-completion"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33ce515a9055cf5c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:92

            or os.getenv("LANGSMITH_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf0178e75ae2e336 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:204

                float(os.getenv("LANGSMITH_SAMPLING_RATE"))  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38e61353df594956 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:205

                if os.getenv("LANGSMITH_SAMPLING_RATE") is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73247a2d2ed44667 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/langsmith.py:206

                and os.getenv("LANGSMITH_SAMPLING_RATE").strip().isdigit()  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #241dc501c54df3de — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:28

        self.literalai_api_url = os.getenv("LITERAL_API_URL") or literalai_api_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40cec4c5cf5ca410 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:31

            "x-api-key": literalai_api_key or os.getenv("LITERAL_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d1fe3932af68484 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/literal_ai.py:40

        batch_size = os.getenv("LITERAL_BATCH_SIZE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #baecb751584df6e5 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/logfire_logger.py:36

                logfire.configure(token=os.getenv("LOGFIRE_TOKEN"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76762bfa16c6ac96 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:46

        if os.getenv("OPENMETER_API_KEY", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80cfb3dfc51ce05b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:87

            "type": os.getenv("OPENMETER_EVENT_TYPE", "litellm_tokens"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36140c21e208eafe — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:96

        _url = os.getenv("OPENMETER_API_ENDPOINT", "https://openmeter.cloud")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6508c1a6bb6285dd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:102

        api_key = os.getenv("OPENMETER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b71693f03905d2f6 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:122

        _url = os.getenv("OPENMETER_API_ENDPOINT", "https://openmeter.cloud")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e09d7fb5029fe0e7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/openmeter.py:128

        api_key = os.getenv("OPENMETER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c2a1014a3f08bdd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:43

LITELLM_TRACER_NAME = os.getenv("OTEL_TRACER_NAME", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #acc040b06795576c — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:59

        "service.name": os.getenv("OTEL_SERVICE_NAME", "litellm"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f07db183ab43c590 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:60

        "deployment.environment": os.getenv("OTEL_ENVIRONMENT_NAME", "production"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c082d2c46311ba1d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:62

        "model_id": os.getenv(
            "OTEL_MODEL_ID", os.getenv("OTEL_SERVICE_NAME", "litellm")
        ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab024f3d257c8721 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:63

            "OTEL_MODEL_ID", os.getenv("OTEL_SERVICE_NAME", "litellm")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea8e441e839bbfc7 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:100

        exporter = os.getenv(
            "OTEL_EXPORTER_OTLP_PROTOCOL", os.getenv("OTEL_EXPORTER", "console")
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f5c6ac43ef2139f — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:101

            "OTEL_EXPORTER_OTLP_PROTOCOL", os.getenv("OTEL_EXPORTER", "console")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #601035b8e4542e55 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:103

        endpoint = os.getenv("OTEL_EXPORTER_OTLP_ENDPOINT", os.getenv("OTEL_ENDPOINT"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db8417eb6c0bd458 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:104

        headers = os.getenv(
            "OTEL_EXPORTER_OTLP_HEADERS", os.getenv("OTEL_HEADERS")
        )  # example: OTEL_HEADERS=x-honeycomb-team=B85YgLm96***"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fca6cdb65990bfa2 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:105

            "OTEL_EXPORTER_OTLP_HEADERS", os.getenv("OTEL_HEADERS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a729d1da61679a17 — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opentelemetry.py:144

        _debug_otel = str(os.getenv("DEBUG_OTEL", "False")).lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #251b00178290c66a — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/opik/utils.py:58

    return os.getenv((env_prefix + key).upper(), None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57e0c580a77bc66b — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/prompt_layer.py:15

        self.key = os.getenv("PROMPTLAYER_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7b3fed7d9ba61dd — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/supabase.py:18

        self.supabase_url = os.getenv("SUPABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #809353ce72312f7d — Environment-variable access.

pkgs/python/[email protected]/litellm/integrations/supabase.py:19

        self.supabase_key = os.getenv("SUPABASE_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c7cdea8ec7c720b — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:56

        with open(file_path, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f87e32d61f7ea35 — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:68

                with open(str(content), 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d091a1da3bde3b16 — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/audio_utils/utils.py:136

    return open(file_path, "rb")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5bd4828ea47e153e — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/default_encoding.py:18

os.environ["TIKTOKEN_CACHE_DIR"] = os.getenv(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed394cc52eab46cf — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/default_encoding.py:18

os.environ["TIKTOKEN_CACHE_DIR"] = os.getenv(
    "CUSTOM_TIKTOKEN_CACHE_DIR", filename
)  # use local copy of tiktoken b/c of - https://github.com/BerriAI/litellm/issues/1071

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfe6abf2400b03cb — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/get_model_cost_map.py:18

        os.getenv("LITELLM_LOCAL_MODEL_COST_MAP", False)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aaa7c02e0335f4e — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/get_model_cost_map.py:19

        or os.getenv("LITELLM_LOCAL_MODEL_COST_MAP", False) == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #91510242fb48c724 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3060

                    os.environ.get("SENTRY_API_TRACE_RATE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fbc62e3d9a54889 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3061

                    if "SENTRY_API_TRACE_RATE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90e25aef6f55ea34 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3065

                    os.environ.get("SENTRY_API_SAMPLE_RATE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d36254f59d1e43a6 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3066

                    if "SENTRY_API_SAMPLE_RATE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0bdab6e5a0c77cf9 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3070

                    dsn=os.environ.get("SENTRY_DSN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2aa3137e76ea4707 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3092

                    project_api_key=os.environ.get("POSTHOG_API_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe1994bae271c452 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3093

                    host=os.environ.get("POSTHOG_API_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0e31a9e7894b271 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3105

                    token=os.environ.get("SLACK_API_TOKEN"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #efaa82800d5a42e7 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3106

                    signing_secret=os.environ.get("SLACK_API_SECRET"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #56fd4a41c43d9694 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3108

                alerts_channel = os.environ["SLACK_API_CHANNEL"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5194e54806c0a3b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3301

            os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e129957e65eea179 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3327

                os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc831acc6dd51fca — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3374

            if "LOGFIRE_TOKEN" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62e1b9d0f3729639 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3384

                headers=f"Authorization={os.getenv('LOGFIRE_TOKEN')}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #16fa6d1975ae9609 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3417

            if "LANGTRACE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53e3a73b84afe3df — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3429

            os.environ["OTEL_EXPORTER_OTLP_TRACES_HEADERS"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70dfbc42d9417dd5 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3430

                f"api_key={os.getenv('LANGTRACE_API_KEY')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #77a05834d28d405a — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3646

            if "ARIZE_SPACE_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b969d9166ed0e02 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3648

            if "ARIZE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #803b1726ec051dc6 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3657

            if "LOGFIRE_TOKEN" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8616caaf91200e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:3677

            if "LANGTRACE_API_KEY" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ad841e0237acdfe — Environment-variable access.

pkgs/python/[email protected]/litellm/litellm_core_utils/litellm_logging.py:4490

    if os.getenv("LITELLM_PRINT_STANDARD_LOGGING_PAYLOAD"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdacd4ead12f3e05 — Filesystem access.

pkgs/python/[email protected]/litellm/litellm_core_utils/prompt_templates/common_utils.py:466

        with open(file_content, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b682d6e378bf2a1e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/anthropic/experimental_pass_through/messages/transformation.py:66

            api_key = os.getenv("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bd7954f3e04502f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:183

    azure_authority_host = os.getenv(
        "AZURE_AUTHORITY_HOST", "https://login.microsoftonline.com"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40f71f674f5b1bcb — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:186

    azure_client_id = azure_client_id or os.getenv("AZURE_CLIENT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c05962a8320d6d52 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:187

    azure_tenant_id = azure_tenant_id or os.getenv("AZURE_TENANT_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e408b7a61f14ffa — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:301

    tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a65f1ffc826cb5ff — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:302

    client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2fcc2d44ab62b98e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:304

        "client_secret", os.getenv("AZURE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #534867d7dc6f66d3 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:306

    azure_username = litellm_params.get("azure_username", os.getenv("AZURE_USERNAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c09ccbd04e4e313 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:307

    azure_password = litellm_params.get("azure_password", os.getenv("AZURE_PASSWORD"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1cc4c246cf465c3 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:310

        os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #134db116a3a860ac — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:498

        tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #388c233d3f2e3146 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:499

        client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e233554a09b775f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:501

            "client_secret", os.getenv("AZURE_CLIENT_SECRET")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8870c787a7ef9aa5 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:504

            "azure_username", os.getenv("AZURE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e546eecddca09a9 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:507

            "azure_password", os.getenv("AZURE_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb1acbdb090f5560 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:511

            os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9bfa8736b826700 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:568

            api_version = os.getenv(
                "AZURE_API_VERSION", litellm.AZURE_DEFAULT_API_VERSION
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #90f0bf4787fcde5e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:623

        tenant_id = litellm_params.get("tenant_id", os.getenv("AZURE_TENANT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ddaed1c804338834 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:624

        client_id = litellm_params.get("client_id", os.getenv("AZURE_CLIENT_ID"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1c5b4adcd868b2b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/azure/common_utils.py:627

            os.getenv("AZURE_SCOPE", "https://cognitiveservices.azure.com/.default"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d4604c66dfc8e17 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:116

                if key.upper() in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5604659e2d4250c5 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:117

                    params_to_check[i] = os.getenv(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2786f8e530eb3113 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:183

            current_role_arn = os.getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #273b44e099aa053d — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:184

            web_identity_token_file = os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ae47118a380168d — Filesystem access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:475

        with open(web_identity_token_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f01c14025f790a0e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:569

        web_identity_token_file = os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e06461afc725862f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:570

        irsa_role_arn = os.getenv("AWS_ROLE_ARN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d82698efe647937 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/base_aws_llm.py:582

                region = os.getenv("AWS_REGION") or os.getenv("AWS_DEFAULT_REGION") or "us-east-1"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13558bda04d9d57e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/bedrock/common_utils.py:159

    ssl_verify = os.getenv("SSL_VERIFY", litellm.ssl_verify)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25d4ff4f7fa9e479 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/aiohttp_transport.py:247

            or str_to_bool(os.getenv("DISABLE_AIOHTTP_TRUST_ENV", "False"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bef3d0fec2885827 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:76

        ssl_verify = os.getenv("SSL_VERIFY", litellm.ssl_verify)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c038a506f75e10f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:83

    ssl_security_level = os.getenv("SSL_SECURITY_LEVEL", litellm.ssl_security_level)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ea5491b72175478b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:89

        ssl_cert_file = os.getenv("SSL_CERT_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #868093fca3bce456 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:193

        cert = os.getenv("SSL_CERTIFICATE", litellm.ssl_certificate)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7d8283d48663f55 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:572

            or str_to_bool(os.getenv("DISABLE_AIOHTTP_TRANSPORT", "False")) is True

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba4c6e38d3d10fa1 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:633

        if str_to_bool(os.getenv("AIOHTTP_TRUST_ENV", "False")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b50339aa1a34080b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/custom_httpx/http_handler.py:674

        cert = os.getenv("SSL_CERTIFICATE", litellm.ssl_certificate)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1366888f34bab692 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:31

        self.token_dir = os.getenv(
            "GITHUB_COPILOT_TOKEN_DIR",
            os.path.expanduser("~/.config/litellm/github_copilot"),
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe58f8ce38194e4c — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:37

            os.getenv("GITHUB_COPILOT_ACCESS_TOKEN_FILE", "access-token"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #118c7b190a873342 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:40

            self.token_dir, os.getenv("GITHUB_COPILOT_API_KEY_FILE", "api-key.json")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79185ec955c6e2b7 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:55

            with open(self.access_token_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #53b3efe5c694bf53 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:69

                    with open(self.access_token_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b2800ac553f8f39 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:94

            with open(self.api_key_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd5a87d1c5a67197 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:113

            with open(self.api_key_file, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9ac2b087f80554e — Filesystem access.

pkgs/python/[email protected]/litellm/llms/github_copilot/authenticator.py:143

            with open(self.api_key_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #571273a49f9b07a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:82

            base_url = os.getenv("HF_API_BASE") or os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e16284aa62db716f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:102

        elif os.getenv("HF_API_BASE") or os.getenv("HUGGINGFACE_API_BASE"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc63568f4af721fe — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:103

            complete_url = str(os.getenv("HF_API_BASE")) or str(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6084d048865cfc69 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/chat/transformation.py:104

                os.getenv("HUGGINGFACE_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82cdd5721539ab75 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:76

    if os.getenv("HUGGINGFACE_API_KEY"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4505713dd5039d59 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/common_utils.py:77

        headers["Authorization"] = f"Bearer {os.getenv('HUGGINGFACE_API_KEY')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82290c81ac0b6f68 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:355

        elif "HF_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #276217326806b8d0 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:356

            embed_url = os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d63cfe579dee9bad — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:357

        elif "HUGGINGFACE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34cd98d9637c266c — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/handler.py:358

            embed_url = os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9edc23580d20ef38 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:164

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2038a0c137fb3ef — Filesystem access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:178

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0afab6462a9a56b — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:343

        elif "HF_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f45f2c2afe638826 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:344

            completion_url = os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6244c0220c40c6f — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:345

        elif "HUGGINGFACE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25c83082fc4077da — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/embedding/transformation.py:346

            completion_url = os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c875f77742898ac — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:55

        elif os.getenv("HF_API_BASE") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5730b48735d00485 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:56

            return os.getenv("HF_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8994c2dc4ceabfe — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:57

        elif os.getenv("HUGGINGFACE_API_BASE") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed7cb9168ec97138 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/huggingface/rerank/transformation.py:58

            return os.getenv("HUGGINGFACE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f885b689057c247 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/oci/chat/transformation.py:98

        with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4258b6c379fba73e — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/predibase/chat/handler.py:254

        elif "PREDIBASE_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cc62f3187cc716af — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/predibase/chat/handler.py:255

            base_url = os.getenv("PREDIBASE_API_BASE", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #281f9e90b56e035e — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:95

            with open(str(file_content), "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72d4aeade2ab5ae6 — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:165

        bucket_name = litellm_params.get("bucket_name") or os.getenv("GCS_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da5457a48d3fcba6 — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/files/transformation.py:449

            with open(str(file_content), "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eef16e14b9096fca — Environment-variable access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/vertex_ai_non_gemini.py:157

                f"VERTEX AI: creds={creds}; google application credentials: {os.getenv('GOOGLE_APPLICATION_CREDENTIALS')}"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7d792e40c6d5a1c — Filesystem access.

pkgs/python/[email protected]/litellm/llms/vertex_ai/vertex_llm_base.py:66

                        json_obj = json.load(open(credentials))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe8de5e09d66731c — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2165

                or os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a02683abfb5b2a35 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2210

                or os.environ.get("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da0b9441c9d63337 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2466

                or os.environ.get("HF_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d82ff2d3408bfd0b — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2467

                or os.environ.get("HUGGINGFACE_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2934600c7fef8922 — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:2535

                or os.getenv("DATABRICKS_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6e309102f5b603c — Environment-variable access.

pkgs/python/[email protected]/litellm/main.py:3283

                or os.environ.get("OLLAMA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c338fc1ed281804 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/_experimental/mcp_server/utils.py:13

MCP_TOOL_PREFIX_SEPARATOR = os.environ.get("MCP_TOOL_PREFIX_SEPARATOR", "-")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de02a96e44131c79 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/_logging.py:11

log_level = os.getenv("LITELLM_LOG", "INFO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc9e9ca7e6734e45 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:464

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #93260de922570196 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:465

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6696711c9d676dc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/auth_utils.py:466

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50ae8e7cfc4e203f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/handle_jwt.py:402

        keys_url = os.getenv("JWT_PUBLIC_KEY_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f8659e85473c8bc6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/handle_jwt.py:489

        audience = os.getenv("JWT_AUDIENCE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c913e904f4bd4340 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:28

        self.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #00c1f6821872deee — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:45

                with open(_path_to_public_key, "rb") as key_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #81390098c8375230 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/litellm_license.py:109

                self.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7df8db9b92f17a85 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:37

    token_info_endpoint = os.getenv("OAUTH_TOKEN_INFO_ENDPOINT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #38ab4e41020932ec — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:38

    user_id_field_name = os.environ.get("OAUTH_USER_ID_FIELD_NAME", "sub")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb3ded65492f5aa6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:39

    user_role_field_name = os.environ.get("OAUTH_USER_ROLE_FIELD_NAME", "role")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3c096b191f5356e8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/oauth2_check.py:40

    user_team_id_field_name = os.environ.get("OAUTH_USER_TEAM_ID_FIELD_NAME", "team_id")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c493c119bc6e7b7 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:80

            oidc_token = open(aws_web_identity_token).read()  # check if filepath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dbb353630340f7f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:169

            aws_region_name=os.getenv("AWS_REGION_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f995706a55aed059 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:170

            aws_access_key_id=os.getenv("AWS_ACCESS_KEY_ID"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ff5077446da32e32 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:171

            aws_secret_access_key=os.getenv("AWS_SECRET_ACCESS_KEY"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c399c3e09fc719fd — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:172

            aws_session_name=os.getenv("AWS_SESSION_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #74bc082e31c58ff3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:173

            aws_profile_name=os.getenv("AWS_PROFILE_NAME"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76076673775d1c5b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:174

            aws_role_name=os.getenv("AWS_ROLE_NAME", os.getenv("AWS_ROLE_ARN")),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f04fa7b720b06363 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:175

            aws_web_identity_token=os.getenv(
                "AWS_WEB_IDENTITY_TOKEN", os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")
            ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #421d29a98710e54e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/auth/rds_iam_token.py:176

                "AWS_WEB_IDENTITY_TOKEN", os.getenv("AWS_WEB_IDENTITY_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ab07ae097a0cfc1 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/auth.py:22

    with open(token_file, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #882ee92901c061e8 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/auth.py:34

        with open(token_file, 'r') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #673f1d1977b9c41c — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/client/cli/commands/models.py:364

    with open(yaml_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ceaa72fe71a4950b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/debug_utils.py:52

if os.environ.get("LITELLM_PROFILE", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b07b7a9df7ff850 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/debug_utils.py:246

            litellm_log_setting = os.environ.get("LITELLM_LOG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7beb27364850a22f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/encrypt_decrypt_utils.py:11

    salt_key = os.getenv("LITELLM_SALT_KEY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c924528f2d0ff48 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/html_forms/ui_login.py:3

url_to_redirect_to = os.getenv("PROXY_BASE_URL", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #79e0092dda872a20 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/common_utils/html_forms/ui_login.py:4

server_root_path = os.getenv("SERVER_ROOT_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ef074b104a77483 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/common_utils/load_config_utils.py:111

        with open(local_file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfd90ec94f0fb00b — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/common_utils/load_config_utils.py:158

        with open(local_file_path, 'w') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f52592c4da211522 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/check_migration.py:95

        db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #20bac296a96098b7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/db_spend_update_writer.py:332

        spend_logs_url: Optional[str] = os.getenv("SPEND_LOGS_URL"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e9da6f6a71ad9316 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:69

        os.environ["AWS_ACCESS_KEY_ID"] = aws_access_key_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec3dfe7278522baf — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:70

        os.environ["AWS_SECRET_ACCESS_KEY"] = aws_secret_access_key

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68efbe4d6d28f156 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/dynamo_db.py:71

        os.environ["AWS_SESSION_TOKEN"] = aws_session_token

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe4281c75699127b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:67

            db_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e76609d51e2529c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:68

            db_port = os.getenv("DATABASE_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b711bb130746610 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:69

            db_user = os.getenv("DATABASE_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8c1eea0ff5dc73d1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:70

            db_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43dcafd1311d20d1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:71

            db_schema = os.getenv("DATABASE_SCHEMA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2510d7a19ddbb43d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:82

            os.environ["DATABASE_URL"] = _db_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bc81ebd02bca75d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:106

            db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4bce2ccf318bcc6e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/db/prisma_client.py:204

        disable_updates = os.getenv("DISABLE_SCHEMA_UPDATE", "false")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7602b0385efca9a4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/example_config_yaml/custom_auth.py:10

        modified_master_key = f"{os.getenv('LITELLM_MASTER_KEY')}-1234"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cec302fd794302a5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aim/aim.py:48

        self.api_key = api_key or os.environ.get("AIM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #733bef6f0f89af1c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aim/aim.py:56

            api_base or os.environ.get("AIM_API_BASE") or "https://api.aim.security"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4701ca12152a8f2d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aporia_ai/aporia_ai.py:48

        self.aporia_api_key = api_key or os.environ["APORIO_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #da7be16f7f70b500 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/aporia_ai/aporia_ai.py:49

        self.aporia_api_base = api_base or os.environ["APORIO_API_BASE"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ec7333afc046269 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/guardrails_ai/guardrails_ai.py:74

            api_base or os.getenv("GUARDRAILS_AI_API_BASE") or "http://0.0.0.0:8000"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #05636d19234d23c7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lakera_ai.py:62

        self.lakera_api_key = api_key or os.environ["LAKERA_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a948320d05db7c02 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lakera_ai_v2.py:53

        self.lakera_api_key = api_key or os.environ["LAKERA_API_KEY"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #561e87975cef707e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:52

        self.lasso_api_key = lasso_api_key or api_key or os.environ.get("LASSO_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95b8e934733e6e4a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:53

        self.user_id = user_id or os.environ.get("LASSO_USER_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #149675612e71b7f1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:54

        self.conversation_id = conversation_id or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89479ebe2e49d964 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:54

        self.conversation_id = conversation_id or os.environ.get(
            "LASSO_CONVERSATION_ID"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d835c0333b60b16 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/lasso/lasso.py:66

            api_base or os.getenv("LASSO_API_BASE") or "https://server.lasso.security"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6b643ceb24de7e3b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:143

        self.api_key = api_key or os.environ.get("NOMA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #62e7b85363d274d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:144

        self.api_base = api_base or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #283c28c1405cafd1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:144

        self.api_base = api_base or os.environ.get(
            "NOMA_API_BASE", NomaGuardrail._DEFAULT_API_BASE
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a3691d053a081908 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:147

        self.application_id = application_id or os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7d86a8acc81fa1f3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:147

        self.application_id = application_id or os.environ.get(
            "NOMA_APPLICATION_ID", "litellm"
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ca7f83d546bab9e7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:153

                os.environ.get("NOMA_MONITOR_MODE", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32f3613bb4136cbf — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/noma/noma.py:160

                os.environ.get("NOMA_BLOCK_FAILURES", "true").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ade6f1a0bedc311 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/openai/moderations.py:101

            os.environ.get("OPENAI_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d19b1ce449c9d546 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pangea/pangea.py:78

        self.api_key = api_key or os.environ.get("PANGEA_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9bf2b6efe16c2562 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pangea/pangea.py:87

            or os.environ.get("PANGEA_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd222a3bd8b5b559 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:59

        self.api_key = api_key or os.getenv("PANW_PRISMA_AIRS_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1375b68e2fbce3bc — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/panw_prisma_airs/panw_prisma_airs.py:62

            or os.getenv("PANW_PRISMA_AIRS_API_BASE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0160f9534093abc8 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:87

        self.api_key = api_key or os.environ.get("PILLAR_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a6a437a5fefd6ea — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:96

        self.api_base = api_base or os.getenv("PILLAR_API_BASE") or self.BASE_API_URL

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89d62101ff5d8249 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/pillar/pillar.py:99

        action = on_flagged_action or os.environ.get("PILLAR_ON_FLAGGED_ACTION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1937fb8fb4eaf7c3 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/guardrails/guardrail_hooks/presidio.py:94

                with open(ad_hoc_recognizers, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5286ad2ea134f645 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/health_endpoints/_health_endpoints.py:268

                user_email=os.getenv("TEST_EMAIL_ADDRESS"),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #27e42acb4ca45c28 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/__init__.py:25

if os.getenv("EXPERIMENTAL_MULTI_INSTANCE_RATE_LIMITING", "false").lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdeabf2e25264519 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/dynamic_rate_limiter.py:113

                if os.getenv("LITELLM_LICENSE", None) is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #23f077b6c70bbdea — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/hooks/parallel_request_limiter_v3.py:115

        self.window_size = int(os.getenv("LITELLM_RATE_LIMIT_WINDOW_SIZE", 60))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #edd39eb7f33276f7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:94

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0cb282f600a616d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:95

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc3aac2bf2d38a22 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:96

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfbc8430509f293f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:99

    _disable_ui_flag = os.getenv("DISABLE_ADMIN_UI")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee9013735f357d34 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:134

    ui_username = os.getenv("UI_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #358e0e9562abdfae — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:197

    generic_user_id_attribute_name = os.getenv(
        "GENERIC_USER_ID_ATTRIBUTE", "preferred_username"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df733e7dcd42de73 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:200

    generic_user_display_name_attribute_name = os.getenv(
        "GENERIC_USER_DISPLAY_NAME_ATTRIBUTE", "sub"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af781f02f8c0c557 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:203

    generic_user_email_attribute_name = os.getenv(
        "GENERIC_USER_EMAIL_ATTRIBUTE", "email"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a19cd4ecbe4fd12 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:207

    generic_user_first_name_attribute_name = os.getenv(
        "GENERIC_USER_FIRST_NAME_ATTRIBUTE", "first_name"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #716ae7b3a9a0b079 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:210

    generic_user_last_name_attribute_name = os.getenv(
        "GENERIC_USER_LAST_NAME_ATTRIBUTE", "last_name"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2a95636a1224218 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:214

    generic_provider_attribute_name = os.getenv(
        "GENERIC_USER_PROVIDER_ATTRIBUTE", "provider"
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd6fc739fd714071 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:254

    generic_client_secret = os.getenv("GENERIC_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e26f1c0b5467518f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:255

    generic_scope = os.getenv("GENERIC_SCOPE", "openid email profile").split(" ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #97a620baaa2d4d25 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:256

    generic_authorization_endpoint = os.getenv("GENERIC_AUTHORIZATION_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d2f7ee39931e98f1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:257

    generic_token_endpoint = os.getenv("GENERIC_TOKEN_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb28cff58487b360 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:258

    generic_userinfo_endpoint = os.getenv("GENERIC_USERINFO_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d417ef178617e391 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:260

        os.getenv("GENERIC_INCLUDE_CLIENT_ID", "false").lower() == "true"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61770c4e67468f3c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:325

    additional_generic_sso_headers = os.getenv(
        "GENERIC_SSO_HEADERS", None
    )  # Comma-separated list of headers to add to the request - e.g. Authorization=Bearer <token>, Content-Type=application/json, etc.

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6e9fd8392c71a01 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:525

    proxy_admin_id = os.getenv("PROXY_ADMIN_ID")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73cb1fafa7a8e090 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:585

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3e40c181d02ccf7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:586

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d040a5e46a74068 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:587

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19323e9939817e35 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:796

    _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52bc81e91bb05964 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:797

    _logout_url = os.getenv("PROXY_LOGOUT_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d35cfc15623af00 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:804

    if "PROXY_DEFAULT_TEAM_DISABLED" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a57589a951f542f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:805

        if os.environ["PROXY_DEFAULT_TEAM_DISABLED"].lower() == "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07ec6f2413729299 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:849

            google_client_secret = os.getenv("GOOGLE_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feac1c925480467d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:871

            microsoft_client_secret = os.getenv("MICROSOFT_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #083e7b20fbe40d3c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:872

            microsoft_tenant = os.getenv("MICROSOFT_TENANT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #55ec36abff64cf5f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:893

            generic_client_secret = os.getenv("GENERIC_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6f5d369d30f666f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:894

            generic_scope = os.getenv("GENERIC_SCOPE", "openid email profile").split(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6653322978a91a43 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:897

            generic_authorization_endpoint = os.getenv(
                "GENERIC_AUTHORIZATION_ENDPOINT", None
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af5d495a7f7e5039 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:900

            generic_token_endpoint = os.getenv("GENERIC_TOKEN_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c26b637441e6f7e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:901

            generic_userinfo_endpoint = os.getenv("GENERIC_USERINFO_ENDPOINT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d5b382a242c86dab — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:955

                state = os.getenv("GENERIC_CLIENT_STATE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c99e1598ff037d95 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1230

        if user_email is not None and os.getenv("ALLOWED_EMAIL_DOMAINS") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80687842666cee56 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1232

            allowed_domains = os.getenv("ALLOWED_EMAIL_DOMAINS").split(",")  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #06d1732b5fef597b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1245

            generic_user_role_attribute_name = os.getenv(
                "GENERIC_USER_ROLE_ATTRIBUTE", "role"
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b26a2410201d350a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1446

        microsoft_client_secret = os.getenv("MICROSOFT_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #66a20928a7da16d4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1447

        microsoft_tenant = os.getenv("MICROSOFT_TENANT", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #80007215577c63f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1531

            service_principal_id = os.getenv("MICROSOFT_SERVICE_PRINCIPAL_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a57cb4b7333b07bb — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1735

        google_client_secret = os.getenv("GOOGLE_CLIENT_SECRET", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f6aca7cf034d894 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1772

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e71e61f9d4f95450 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1773

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c1097f1d4987abe — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1774

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1d98479de61fa55 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1846

    microsoft_client_id = os.getenv("MICROSOFT_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ebf5b246817a658 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1847

    google_client_id = os.getenv("GOOGLE_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #54ed2c2c3a96ea6b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1848

    generic_client_id = os.getenv("GENERIC_CLIENT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0c23b6be6508185 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/management_endpoints/ui_sso.py:1850

    redirect_url = os.getenv("PROXY_BASE_URL", str(request.base_url))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4cd4c3be88aa6905 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:175

    base_target_url = os.getenv("GEMINI_API_BASE") or "https://generativelanguage.googleapis.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #50a9aa591cf3ccbb — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:234

    base_target_url = os.getenv("COHERE_API_BASE") or "https://api.cohere.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2a54a6a57282d41b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:363

    base_target_url = os.getenv("MISTRAL_API_BASE") or "https://api.mistral.ai"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6c88df98bf9d709 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:430

    base_target_url = os.getenv("ANTHROPIC_API_BASE") or "https://api.anthropic.com"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3822fd3f29e95dd5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/pass_through_endpoints/llm_passthrough_endpoints.py:1026

    base_target_url = os.getenv("OPENAI_API_BASE") or "https://api.openai.com/"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c68761a635c8876a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:24

litellm_mode = os.getenv("LITELLM_MODE", "DEV")  # "PRODUCTION", "DEV"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cbcce6aae913f9a3 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:280

            with open(os.devnull, "w") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ccd588b5d596861b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:606

            db_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a88e76e781b18c55 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:607

            db_port = os.getenv("DATABASE_PORT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecaf218c90f7e607 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:608

            db_user = os.getenv("DATABASE_USER")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3195866544ed6557 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:609

            db_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31e9b8d52f548e9c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:610

            db_schema = os.getenv("DATABASE_SCHEMA")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #748a156e1cf24ba7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:621

            os.environ["DATABASE_URL"] = _db_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c55ab4f8293a9e5e — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:622

            os.environ["IAM_TOKEN_DB_AUTH"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bf4bcd243bea83b7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:629

            os.getenv("USE_AWS_KMS", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ada3fce5fedb3c0 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:630

            and os.getenv("USE_AWS_KMS") == "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b3496935f87b7120 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:636

                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59cebfe6df9283b6 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:687

            if database_url is None and os.getenv("DATABASE_URL") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7893566fc79d376 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:693

                    os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d4a35e5601a0c8c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:714

                os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8a443054978effd1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:717

        if config is None and os.getenv("DATABASE_URL") is None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd76f3453d82b2da — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:723

                os.environ["DATABASE_URL"] = database_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c79ee70554ce67ba — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:735

            os.getenv("DATABASE_URL", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2f49759ff55a59b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:736

            or os.getenv("DIRECT_URL", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a5a24314b5956e1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:741

                if os.getenv("DATABASE_URL", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #186ef12d2450dba2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:749

                    os.environ["DATABASE_URL"] = modified_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5465ac99605931b3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:750

                if os.getenv("DIRECT_URL", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #179825604d4a494b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:756

                    database_url = os.getenv("DIRECT_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ee3e4ab5399c251 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_cli.py:758

                    os.environ["DIRECT_URL"] = modified_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #333148f27faa59b9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:453

server_root_path = os.getenv("SERVER_ROOT_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f5f16f8bcace9938 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:459

global_max_parallel_request_retries_env: Optional[str] = os.getenv(
    "LITELLM_GLOBAL_MAX_PARALLEL_REQUEST_RETRIES"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3dcea84383ee5f2d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:469

global_max_parallel_request_retry_timeout_env: Optional[str] = os.getenv(
    "LITELLM_GLOBAL_MAX_PARALLEL_REQUEST_RETRY_TIMEOUT"
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #70c758f54a61b380 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:491

_title = os.getenv("DOCS_TITLE", "LiteLLM API") if premium_user else "LiteLLM API"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36474664202ce15c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:493

    os.getenv(
        "DOCS_DESCRIPTION",
        f"Enterprise Edition \n\nProxy Server to call 100+ LLMs in the OpenAI format. {custom_swagger_message}\n\n{ui_message}",
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f46b151dbc0938a7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:596

        elif os.environ.get("LITELLM_CONFIG_BUCKET_NAME") is not None and isinstance(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92432b36d0bec5d7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:767

if os.getenv("DOCS_FILTERED", "False") == "True" and premium_user:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a9f03a04969c5e6 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:830

                    with open(file_path, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c276bed42f28241 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:845

                    with open(file_path, "w", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #82f996b96fe4e5c5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1064

        KVUri = os.getenv("AZURE_KEY_VAULT_URI", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #224965bc2c007737 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1344

        with open(os.devnull, "w") as devnull:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #027876792dc5f7a3 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1417

            with open(file_path, "r") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc756a4d6300d1c2 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1440

            with open(f"{file_path}", "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ace69b9d81438d63 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1521

            with open(f"{user_config_file_path}", "w") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8299a987ec87a45 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1634

        if os.environ.get("LITELLM_CONFIG_BUCKET_NAME") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13aae84f3145879b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1635

            bucket_name = os.environ.get("LITELLM_CONFIG_BUCKET_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #57dd21e4c4da7671 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1636

            object_key = os.environ.get("LITELLM_CONFIG_BUCKET_OBJECT_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2450cd456ee147f7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1637

            bucket_type = os.environ.get("LITELLM_CONFIG_BUCKET_TYPE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8221c4458e5482b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1719

                        os.environ[key] = resolved_secret_string

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #332afc10777a282a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1728

                    os.environ[key] = str(value)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34d8b86c7fc8ab68 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:1732

                _license_check.license_str = os.getenv("LITELLM_LICENSE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7391e4a67c86b83 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:2169

                    v = os.getenv(_v)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c3ea0c556267c5d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:2652

                    os.environ[k] = decrypted_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10720245075b2e02 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3236

    os.environ["WORKER_CONFIG"] = json.dumps(data)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b91afa65eb167e1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3262

    if os.getenv("LITELLM_DONT_SHOW_FEEDBACK_BOX", "").lower() != "true":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9442c5e4fbcf1a76 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3293

        litellm_log_setting = os.environ.get("LITELLM_LOG", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1700ec20eea97ac3 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3333

        os.environ["AZURE_API_VERSION"] = (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f96a53fdd86cc5a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:3736

            if os.getenv("PROMETHEUS_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c7f23ee7d641a7ea — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7505

    ui_username = os.getenv("UI_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dc975c3ff7d79db5 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7540

    ui_username = os.getenv("UI_USERNAME", "admin")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a499e34e1b0e5e51 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7541

    ui_password = os.getenv("UI_PASSWORD", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6bd5521e600c9f03 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7587

            os.getenv("PROXY_ADMIN_ID", None) is not None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e0fc9871d6b6092 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7588

            and os.environ["PROXY_ADMIN_ID"] == user_id

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1993d20a7b9403c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7591

            key_user_id = os.getenv("PROXY_ADMIN_ID", litellm_proxy_admin_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0210192280709a42 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7602

        if os.getenv("DATABASE_URL") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #14b6f5a8808a4a34 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7706

            if os.getenv("DATABASE_URL") is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a45e0a382f0b3d96 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7977

    logo_path = os.getenv("UI_LOGO_PATH", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c2c256349767bd3d — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:7989

    logo_path = os.getenv("UI_LOGO_PATH", default_logo)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c9d7ea4e2c785650 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:8000

            with open(cache_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7de4e50bd45dcddf — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/proxy_server.py:8942

                    _value = os.getenv("SLACK_WEBHOOK_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f42c50778834a55b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/spend_tracking/spend_management_endpoints.py:2159

            db_url = os.getenv("DATABASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9f6ed09b2d5c884 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:410

        return environment_variables.get(env_var_name) or os.getenv(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eb0950d8e72f426b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:510

            os.environ[env_var_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e0ca10ce496b2c58 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:597

        os.environ["UI_LOGO_PATH"] = logo_url

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a5f2bc7d94a998e9 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:604

        if "UI_LOGO_PATH" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a13c3d9c85e3724 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:605

            del os.environ["UI_LOGO_PATH"]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c82e0298648ccc4 — Filesystem access.

pkgs/python/[email protected]/litellm/proxy/ui_crud_endpoints/proxy_setting_endpoints.py:668

    with open(file_path, "wb") as buffer:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a33b2d72388f5bef — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1095

        _proxy_base_url = os.getenv("PROXY_BASE_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86327959bc9e5648 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1593

            os.getenv("IAM_TOKEN_DB_AUTH")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2afc526b98f1414c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:1716

            pg_schema = os.getenv("DATABASE_SCHEMA", "public")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a12f91db332b58f7 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3043

    smtp_host = os.getenv("SMTP_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4e55ed904a1f590a — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3044

    smtp_port = int(os.getenv("SMTP_PORT", "587"))  # default to port 587

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f9be3b0da3b9f594 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3045

    smtp_username = os.getenv("SMTP_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2edde39df50de885 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3046

    smtp_password = os.getenv("SMTP_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #47c5d1c1cd6b52fa — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3047

    sender_email = os.getenv("SMTP_SENDER_EMAIL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a07992e3c359fd7f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3078

            if os.getenv("SMTP_TLS", "True") != "False":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0061ff30eb7dcd1c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3185

                    base_url = os.getenv("SPEND_LOGS_URL", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5b89b10554888762 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3495

    if redoc_url := os.getenv("REDOC_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #458a9be686631290 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3498

    if str_to_bool(os.getenv("NO_REDOC")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ad6c460b71074d89 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3512

    if docs_url := os.getenv("DOCS_URL"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #36340281fe7f5d3f — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3515

    if str_to_bool(os.getenv("NO_DOCS")) is True:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa1a18e996ffe063 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3617

    return os.getenv("PROXY_BASE_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #73774b07e2c7a897 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3627

    return os.getenv("SERVER_ROOT_PATH", "/")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d46a1f7800315d4 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3669

    database_host = os.getenv("DATABASE_HOST")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #07436460b068d1e2 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3670

    database_username = os.getenv("DATABASE_USERNAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2bb9a262e514ee0c — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3671

    database_password = os.getenv("DATABASE_PASSWORD")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2dfced8011d25874 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3672

    database_name = os.getenv("DATABASE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #727a18ba0b6d040b — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/utils.py:3724

            anthropic_api_key = os.getenv("ANTHROPIC_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d196cef99e02a682 — Environment-variable access.

pkgs/python/[email protected]/litellm/proxy/vertex_ai_endpoints/langfuse_endpoints.py:95

        or os.getenv("LANGFUSE_HOST", "https://cloud.langfuse.com")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a2342f6f666ec45c — Environment-variable access.

pkgs/python/[email protected]/litellm/router.py:5181

                    params[param_key] = os.environ.get(env_name, "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f805913a7bec2a7 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:22

    if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab3f0040208b5857 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:35

        kms_client = boto3.client("kms", region_name=os.getenv("AWS_REGION_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #84530e399185ea5e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:56

        if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #377c1870f77cc158 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:62

        if os.getenv("LITELLM_LICENSE", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9123439f9162431e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:64

        elif os.getenv("LITELLM_SECRET_AWS_KMS_LITELLM_LICENSE", None) is not None:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df9c3119c9bf461b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:80

            kms_client = boto3.client("kms", region_name=os.getenv("AWS_REGION_NAME"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #674fe9b4e4971b84 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:89

        encrypted_value = os.getenv(secret_name, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b17f89c0e6d57683 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager.py:132

    for k, v in os.environ.items():

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e924a5c617556c6 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager_v2.py:42

        if "AWS_REGION_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e717c27dee16ee91 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/aws_secret_manager_v2.py:127

            return os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fcd8c6f40c7e57ee — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:40

            os.environ.get("AZURE_SCOPE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95080a25f772c276 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:46

        or os.environ.get("AZURE_CREDENTIAL", AzureCredentialType.ClientSecretCredential)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1b23b48972b7877e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:60

            client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #25847bcb856faed1 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:61

            client_secret=os.environ["AZURE_CLIENT_SECRET"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #94fba4b885425a53 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:62

            tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e4c8fdb8c646719 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:65

        credential = ManagedIdentityCredential(client_id=os.environ["AZURE_CLIENT_ID"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f5f64f0dc735779 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:67

        if os.getenv("AZURE_CERTIFICATE_PASSWORD"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eabfbfadc181ba21 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:69

                client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d339858b2395850a — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:70

                tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1463beca53631052 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:71

                certificate_path=os.environ["AZURE_CERTIFICATE_PATH"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #364152c6b23e1c5e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:72

                password=os.environ["AZURE_CERTIFICATE_PASSWORD"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6f684d543edf42e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:76

                client_id=os.environ["AZURE_CLIENT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d60af4790b9de82b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:77

                tenant_id=os.environ["AZURE_TENANT_ID"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #082e49d596ffd1ed — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/get_azure_ad_token_provider.py:78

                certificate_path=os.environ["AZURE_CERTIFICATE_PATH"],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c826b32c452a71d3 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:19

    if "GOOGLE_APPLICATION_CREDENTIALS" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19416b3d2a21a644 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:23

    if "GOOGLE_KMS_RESOURCE_NAME" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #92bcfaa398c2f0a1 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_kms.py:41

        litellm._google_kms_resource_name = os.getenv("GOOGLE_KMS_RESOURCE_NAME")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9200925fd19f6668 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:32

        self.PROJECT_ID = os.environ.get("GOOGLE_SECRET_MANAGER_PROJECT_ID", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #be00a0494ae894e3 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:40

        _refresh_interval = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #023f8b4e95946d3c — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:40

        _refresh_interval = os.environ.get(
            "GOOGLE_SECRET_MANAGER_REFRESH_INTERVAL", refresh_interval
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b1a8d69b50946474 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:50

        _always_read_secret_manager = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dee86bf638a46213 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/google_secret_manager.py:50

        _always_read_secret_manager = os.environ.get(
            "GOOGLE_SECRET_MANAGER_ALWAYS_READ_SECRET_MANAGER",
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1738d5f56bc801e4 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:25

        self.vault_addr = os.getenv("HCP_VAULT_ADDR", "http://127.0.0.1:8200")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #30627c7054e27045 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:26

        self.vault_token = os.getenv("HCP_VAULT_TOKEN", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ac69dc4b9770b05 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:28

        self.vault_namespace = os.getenv("HCP_VAULT_NAMESPACE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4b20f0e2ae29a94 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:31

        self.tls_cert_path = os.getenv("HCP_VAULT_CLIENT_CERT", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #52e6347ef0683a24 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:32

        self.tls_key_path = os.getenv("HCP_VAULT_CLIENT_KEY", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8136e54c5d9009ee — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:33

        self.vault_cert_role = os.getenv("HCP_VAULT_CERT_ROLE", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33a6274104894028 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:43

        _refresh_interval = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #63a9f684dbda1b20 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/hashicorp_secret_manager.py:43

        _refresh_interval = os.environ.get(
            "HCP_VAULT_REFRESH_INTERVAL", SECRET_MANAGER_REFRESH_INTERVAL
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a62851cfa65e1359 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:130

            env_secret = os.getenv("CIRCLE_OIDC_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d73ed95c2eebf0b — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:136

            env_secret = os.getenv("CIRCLE_OIDC_TOKEN_V2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c5905389326919f6 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:142

            actions_id_token_request_url = os.getenv("ACTIONS_ID_TOKEN_REQUEST_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa05d2d922e3cdb9 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:143

            actions_id_token_request_token = os.getenv("ACTIONS_ID_TOKEN_REQUEST_TOKEN")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cca49e260d2fd7e — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:170

            azure_federated_token_file = os.getenv("AZURE_FEDERATED_TOKEN_FILE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4095f25cb61ccccb — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:185

            with open(azure_federated_token_file, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c291f9d312e18be — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:190

            with open(oidc_aud, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #08e7916580f7c9b1 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:195

            oidc_token = os.getenv(oidc_aud)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #778a72db9cdd111c — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:201

            token_file_path = os.getenv(oidc_aud)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #64b83875506b72cd — Filesystem access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:204

            with open(token_file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b489d72f56ff9006 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:235

                    encrypted_secret: Any = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a0e8b05813eccfd9 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:257

                    encrypted_value = os.getenv(secret_name, None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d093b4e820757d8f — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:302

                    secret = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a352d6c2c7e40c0 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:309

                secret = os.getenv(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #02993916c34c4cc9 — Environment-variable access.

pkgs/python/[email protected]/litellm/secret_managers/main.py:320

            secret = os.environ.get(secret_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a9b7ee927d3ba5a3 — Environment-variable access.

pkgs/python/[email protected]/litellm/types/integrations/slack_alerting.py:51

            os.getenv(
                "SLACK_DAILY_REPORT_FREQUENCY",
                int(SlackAlertingArgsEnum.daily_report_frequency.value),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d03bd0bb202f244a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5216

    no_proxy = os.getenv("NO_PROXY", None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1544e655a4270790 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5268

            if "OPENAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3648e07a3cc1a77b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5274

                "AZURE_API_BASE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bda6109ff02ce1cb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5275

                and "AZURE_API_VERSION" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #26f6ca2885237d9a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5276

                and "AZURE_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fc67e6e5528981f2 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5284

            if "ANTHROPIC_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aa7fae1b8368afd6 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5289

            if "COHERE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76d3865fb5162966 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5294

            if "REPLICATE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ed9a62fd9798607 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5299

            if "OPENROUTER_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ee9eceffe30a02c — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5304

            if "VERCEL_AI_GATEWAY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b7ca7b42a31b4003 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5309

            if "DATAROBOT_API_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7155fb1395684739 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5314

            if "VERTEXAI_PROJECT" in os.environ and "VERTEXAI_LOCATION" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5ee39c8de9b2b145 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5319

            if "HUGGINGFACE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #449db4dea116e1bf — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5324

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a8774564eae3199a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5329

            if "TOGETHERAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1660874141e3d858 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5334

            if "ALEPH_ALPHA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d2242371c71a957 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5339

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #553eed00a98eeba0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5344

            if "NLP_CLOUD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d27785ea8658e61 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5350

                "AWS_ACCESS_KEY_ID" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0348292d16e3ccdb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5351

                and "AWS_SECRET_ACCESS_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec1f4537b06d4297 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5358

            if "OLLAMA_API_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fa6aed2c253cc139 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5363

            if "ANYSCALE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #72f0a2be1255f1f4 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5368

            if "DEEPINFRA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #107792bf59febebb — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5373

            if "FEATHERLESS_AI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #31c25b807f0c4fea — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5378

            if ("GOOGLE_API_KEY" in os.environ) or ("GEMINI_API_KEY" in os.environ):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9ada8953f1eda97a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5384

            if "GROQ_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a35742ae0aab9273 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5389

            if "NVIDIA_NIM_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #575578f5fe43df3b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5394

            if "CEREBRAS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b2cbcdf674646bc2 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5399

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaa6bba1f7439e57 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5404

            if "XAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #34a1286c2658731a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5409

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fe0806204c2d2ad0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5414

            if "VOLCENGINE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5993b2b8bbf58340 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5422

            if "CODESTRAL_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2b03af325e2be24d — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5427

            if "DEEPSEEK_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1a4421c26850dc5 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5432

            if "MISTRAL_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8015bf9bbb622f6c — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5437

            if "PALM_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #104ed313383dac5f — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5442

            if "PERPLEXITYAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cec92b91c38eb24 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5447

            if "VOYAGE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4634f920d16ecd2b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5452

            if "INFINITY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b8453c7a0b21d47 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5458

                "FIREWORKS_AI_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a15ffb2a92d11198 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5459

                or "FIREWORKS_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8281cf986c88b647 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5460

                or "FIREWORKSAI_API_KEY" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bbfab4b412cc79fc — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5461

                or "FIREWORKS_AI_TOKEN" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b3ea9a85327b403 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5467

            if "CLOUDFLARE_API_KEY" in os.environ and (

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e216b41ae3455ca — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5468

                "CLOUDFLARE_ACCOUNT_ID" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a466a246a218db1 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5469

                or "CLOUDFLARE_API_BASE" in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc1de92cda2a7f78 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5476

            if "NOVITA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e518ed1165c0b6ca — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5481

            if "NEBIUS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfae1ea066f1d1d0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5486

            if "DASHSCOPE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7662caf913100482 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5491

            if "MOONSHOT_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #46db7a973a580e04 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5503

            if "OPENAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ea4687e84019a3a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5509

            if "ANTHROPIC_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e16ea612ae92252 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5515

            if "COHERE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1a32a2a2c50a72d2 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5521

            if "REPLICATE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ae929266af07e3b — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5527

            if "OPENROUTER_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0fb08cb938b768f5 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5533

            if "VERCEL_AI_GATEWAY_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fd9777a1b3466d42 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5539

            if "DATAROBOT_API_TOKEN" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e86bdbe99651d581 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5549

            if "VERTEXAI_PROJECT" in os.environ and "VERTEXAI_LOCATION" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4d21e18c94968aca — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5555

            if "HUGGINGFACE_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e6c647275f38133 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5561

            if "AI21_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f3998eca991eb58d — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5567

            if "TOGETHERAI_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f652d629e8ee6a7 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5573

            if "ALEPH_ALPHA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #820cf68a8d089099 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5579

            if "BASETEN_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #95c0f3d735b0c65a — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5585

            if "NLP_CLOUD_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba3ef1c4dce5c9f0 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5590

            if "NOVITA_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bc7adba9459ff640 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:5595

            if "NEBIUS_API_KEY" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #87088ffecef4598b — Filesystem access.

pkgs/python/[email protected]/litellm/utils.py:5971

        with open(config_path, "r") as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0faf9baab70dd9b6 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:6248

            for k, v in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0f2a3079d6cdcf7 — Environment-variable access.

pkgs/python/[email protected]/litellm/utils.py:6312

    environ_keys = os.environ.keys()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

mcp

python dependency

high pii_flow dependency Excluded from app score #cd9beff418f97d1d — User/PII-bearing data read from the environment or filesystem flows to an external network call. This is potential data exfiltration.

pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452 · flow /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:433 → /tmp/closeopen-zrpxd3gl/pkgs/python/[email protected]/src/mcp/client/auth/oauth2.py:452

        return httpx.Request("POST", token_url, data=refresh_data, headers=headers)

User/PII-bearing data flows to an external sink — the classic data-exfiltration shape.

Fix: Confirm no user identifiers reach this sink; redact/hash before sending, or remove the flow.

expand_more 31 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #fca48fec53612abd — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:72

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a58a739183b3d9a0 — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:281

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e0e139578a65dede — Environment-variable access.

pkgs/python/[email protected]/.github/actions/conformance/client.py:349

    scenario = os.environ.get("MCP_CONFORMANCE_SCENARIO")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #5bd537f156ccd53e — Environment-variable access.

pkgs/python/[email protected]/examples/clients/conformance-auth-client/mcp_conformance_auth_client/__init__.py:50

    context_json = os.environ.get("MCP_CONFORMANCE_CONTEXT")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f58a50c884cc4a73 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:343

    server_url = os.getenv("MCP_SERVER_PORT", 8000)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #18fabc71814de668 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:344

    transport_type = os.getenv("MCP_TRANSPORT_TYPE", "streamable-http")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #4327101fb2fc0fd0 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-auth-client/mcp_simple_auth_client/main.py:345

    client_metadata_url = os.getenv("MCP_CLIENT_METADATA_URL")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #75e8057bf2988535 — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:24

        self.api_key = os.getenv("LLM_API_KEY")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #48b69f98378f158a — Filesystem access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:45

        with open(file_path, "r") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #05624734ccd3925f — Environment-variable access.

pkgs/python/[email protected]/examples/clients/simple-chatbot/mcp_simple_chatbot/main.py:83

            env={**os.environ, **self.config["env"]} if self.config.get("env") else None,

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a873e146abcb3cf3 — Filesystem access.

pkgs/python/[email protected]/examples/fastmcp/icons_demo.py:14

icon_data = base64.standard_b64encode(icon_path.read_bytes()).decode()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #aa42b3f98f9ca078 — Environment-variable access.

pkgs/python/[email protected]/examples/fastmcp/memory.py:52

PROFILE_DIR = (Path.home() / ".fastmcp" / os.environ.get("USER", "anon") / "memory").resolve()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #55e0dc4b4563dad3 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/completion_client.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e046977f2ed9f4f2 — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/display_utilities.py:17

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #f5d88e927822d7ee — Environment-variable access.

pkgs/python/[email protected]/examples/snippets/clients/stdio_client.py:19

    env={"UV_INDEX": os.environ.get("UV_INDEX", "")},

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #ad904dd1fce0e514 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/binary_resources.py:9

    with open("logo.png", "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8636935e95665f4e — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results.py:10

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #11ec71b2b7f82101 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/embedded_resource_results_binary.py:12

    with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #305fddc57f4e3e5b — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/prompt_embedded_resources.py:11

    file_content = open(filename).read()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9b0701fe502e6988 — Filesystem access.

pkgs/python/[email protected]/examples/snippets/servers/tool_errors.py:27

    with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #6536818869a37b24 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:53

        code = file.read_text().rstrip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e8343caa75d896a0 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:109

    content = doc_path.read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #556e3cc5ebb8b797 — Filesystem access.

pkgs/python/[email protected]/scripts/update_doc_snippets.py:134

            doc_path.write_text(updated_content)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b355a1c0f4bff37e — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:24

        path = Path(os.environ.get("XDG_CONFIG_HOME", Path.home() / ".config"), "Claude")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4e5449127e118f5 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:77

            config_file.write_text("{}")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c006c9d4e766f8a1 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:88

        config = json.loads(config_file.read_text())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed2ac659f7dce270 — Filesystem access.

pkgs/python/[email protected]/src/mcp/cli/claude.py:135

        config_file.write_text(json.dumps(config, indent=2))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5018e4251b8a8f99 — Environment-variable access.

pkgs/python/[email protected]/src/mcp/cli/cli.py:282

            env=dict(os.environ.items()),  # Convert to list of tuples for env update

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #76ae5dc92634db4c — Environment-variable access.

pkgs/python/[email protected]/src/mcp/client/stdio/__init__.py:59

        value = os.environ.get(key)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #89e05bbbf1fecec6 — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:47

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5f130449e817cfec — Filesystem access.

pkgs/python/[email protected]/src/mcp/server/fastmcp/utilities/types.py:94

            with open(self.path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

rich

python dependency

medium telemetry dependency Excluded from app score #170e9129e0136f2f — Telemetry/analytics SDK usage detected. Confirm user consent and that no PII is sent without a lawful basis.

pkgs/python/[email protected]/rich/progress.py:173

        yield from progress.track(
            sequence,
            total=total,
            completed=completed,
            description=description,
            update_period=update_period,
        )

A telemetry/analytics SDK is used; event data is sent to a third-party collector.

Fix: Ensure user consent and a lawful basis; strip PII from event payloads.

expand_more 22 low-confidence finding(s)

low env_fs dependency Excluded from app score #e222b6066abfe58a — Environment-variable access.

pkgs/python/[email protected]/rich/_unicode_data/__init__.py:67

        unicode_version = os.environ.get("UNICODE_VERSION", "latest")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bb6efb250588f9b6 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:441

        self.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19b49327c895ee1c — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:612

    term.write_text("went back and wrapped to prev line")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d9afb56e3f7cc4b — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:615

    term.write_text("we go up")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5466c0187cb41c28 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:618

    term.write_text("and down")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6a2bd697b6cd908b — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:623

    term.write_text("we went up and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d605a35c2318d59 — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:628

    term.write_text("we went down and back 2")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f472a602c6ac20ef — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:636

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e508b4c74f1c36ee — Filesystem access.

pkgs/python/[email protected]/rich/_win32_console.py:646

    term.write_text("The red arrow shows the cursor location, and direction of erase")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b854a0985a9cfb20 — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:19

                term.write_text(text)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1c712ab890abc864 — Filesystem access.

pkgs/python/[email protected]/rich/_windows_renderer.py:28

                    term.write_text("\r")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5cd86e6080501500 — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:515

        or os.getenv("DATABRICKS_RUNTIME_VERSION")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #86f7b159fa114a66 — Environment-variable access.

pkgs/python/[email protected]/rich/console.py:617

    _environ: Mapping[str, str] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #875c17b4b2890c4c — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2241

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4c1419cf66e28845 — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2349

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3edbabf26e39837b — Filesystem access.

pkgs/python/[email protected]/rich/console.py:2641

        with open(path, "w", encoding="utf-8") as write_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6d753e849f0a851 — Environment-variable access.

pkgs/python/[email protected]/rich/diagnose.py:32

    env = {name: os.getenv(name) for name in env_names}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d454593789f4f49b — Filesystem access.

pkgs/python/[email protected]/rich/json.py:134

            json_data = Path(args.path).read_text()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #298d3f25a0bac061 — Filesystem access.

pkgs/python/[email protected]/rich/markdown.py:777

        with open(args.path, encoding="utf-8") as markdown_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c5c66d316822761 — Filesystem access.

pkgs/python/[email protected]/rich/progress.py:1373

        handle = io.open(file, "rb", buffering=buffering)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1cc2be73c71037f — Filesystem access.

pkgs/python/[email protected]/rich/syntax.py:360

        code = Path(path).read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #32b2ecc76e169e95 — Filesystem access.

pkgs/python/[email protected]/rich/theme.py:73

        with open(path, encoding=encoding) as config_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

PyYAML

python dependency

expand_more 3 low-confidence finding(s)

low env_fs dependency Excluded from app score #fff8e7fe3131f740 — Environment-variable access.

pkgs/python/[email protected]/setup.py:72

os.environ['SETUPTOOLS_USE_DISTUTILS'] = 'local'

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5d0a3f2dd6e5ecb2 — Environment-variable access.

pkgs/python/[email protected]/setup.py:81

if 'sdist' in sys.argv or os.environ.get('PYYAML_FORCE_CYTHON') == '1':

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6a8c0966e1ad75e — Environment-variable access.

pkgs/python/[email protected]/setup.py:160

            with_ext = getattr(self, ext.attr_name) or os.environ.get('PYYAML_FORCE_{0}'.format(ext.feature_name.upper()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

httpx

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #d961818a6c5262be — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:34

        if trust_env and os.environ.get("SSL_CERT_FILE"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4f0c7842bbd03eb1 — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:35

            ctx = ssl.create_default_context(cafile=os.environ["SSL_CERT_FILE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #685a1409bc962b2a — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:36

        elif trust_env and os.environ.get("SSL_CERT_DIR"):  # pragma: nocover

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c204299a1e794f85 — Environment-variable access.

pkgs/python/[email protected]/httpx/_config.py:37

            ctx = ssl.create_default_context(capath=os.environ["SSL_CERT_DIR"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

loguru

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #dadbe290150d355a — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:25

        if "CI" in os.environ and any(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c64a6964f443516a — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:26

            ci in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee68369b96f10a14 — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:30

        if "PYCHARM_HOSTED" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8d4b7e916cd5dc72 — Environment-variable access.

pkgs/python/[email protected]/loguru/_colorama.py:32

        if os.name == "nt" and "TERM" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e85350a9e8c5cedf — Environment-variable access.

pkgs/python/[email protected]/loguru/_defaults.py:5

    if key not in environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5dce40e99e610a3c — Environment-variable access.

pkgs/python/[email protected]/loguru/_defaults.py:8

    val = environ[key]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #13ac0d1276a8c94a — Filesystem access.

pkgs/python/[email protected]/loguru/_file_sink.py:53

        with open(path_in, "rb") as f_in:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #df26a1f9c94663a1 — Filesystem access.

pkgs/python/[email protected]/loguru/_file_sink.py:226

        self._file = open(path, **self._kwargs)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a8897b14976322f — Filesystem access.

pkgs/python/[email protected]/loguru/_logger.py:1868

                with open(str(file)) as fileobj:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

networkx

python dependency

expand_more 16 low-confidence finding(s)

low env_fs dependency Excluded from app score #ab42a64242ab2377 — Environment-variable access.

pkgs/python/[email protected]/doc/conf.py:96

os.environ["_NETWORKX_BUILDING_DOCS_"] = "True"

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #9662c458820e776b — Filesystem access.

pkgs/python/[email protected]/examples/external/javascript_force.py:27

json.dump(d, open("force/force.json", "w"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #270f672c677290b3 — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/examples/graph/plot_football.py:24

sock = urllib.request.urlopen(url)  # open URL

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #d9b0695cd511c644 — Filesystem access.

pkgs/python/[email protected]/examples/graphviz_layout/plot_lanl_routes.py:22

        fh = open("lanl_routes.edgelist")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8293ff52528376dd — Filesystem access.

pkgs/python/[email protected]/examples/subclass/plot_printgraph.py:28

            self.fh = open(file, "w")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b9ac520f983bdc96 — Environment-variable access.

pkgs/python/[email protected]/networkx/conftest.py:47

        backend = os.environ.get("NETWORKX_TEST_BACKEND")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6916e61d4b7f28cf — Environment-variable access.

pkgs/python/[email protected]/networkx/conftest.py:71

            fallback_to_nx = os.environ.get("NETWORKX_FALLBACK_TO_NX")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ed61ddda36cb0bb4 — Environment-variable access.

pkgs/python/[email protected]/networkx/lazy_imports.py:75

    if os.environ.get("EAGER_IMPORT", ""):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #342538ca2c0131f4 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:153

            os.environ.get("NETWORKX_CACHE_CONVERTED_GRAPHS", True)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #abd69a8794d484ea — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:155

        fallback_to_nx=bool(os.environ.get("NETWORKX_FALLBACK_TO_NX", False)),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e7af73a9b3ed776 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:157

            _comma_sep_to_list(os.environ.get("NETWORKX_WARNINGS_TO_IGNORE", ""))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #718b4b8fb8ab39d8 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:167

        for key, val in os.environ.items()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbd191d23f40eae8 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:175

            os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7ba1abd8eccd5ed5 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:175

            os.environ.get(
                "NETWORKX_BACKEND_PRIORITY",
                os.environ.get("NETWORKX_AUTOMATIC_BACKENDS", ""),
            )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba497ea58f6ea823 — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:177

                os.environ.get("NETWORKX_AUTOMATIC_BACKENDS", ""),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #198e35a753614aca — Environment-variable access.

pkgs/python/[email protected]/networkx/utils/backends.py:2152

if os.environ.get("_NETWORKX_BUILDING_DOCS_"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

psutil

python dependency

expand_more 27 low-confidence finding(s)

low env_fs tooling Excluded from app score unreachable #aff3b99a6e406f97 — Filesystem access.

pkgs/python/[email protected]/docs/conf.py:39

    with open(INIT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #68e23dc59961e770 — Environment-variable access.

pkgs/python/[email protected]/psutil/_common.py:34

PSUTIL_DEBUG = bool(os.getenv('PSUTIL_DEBUG'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6587971c5a7ab33 — Filesystem access.

pkgs/python/[email protected]/psutil/_common.py:682

    return open(fname, "rb", buffering=FILE_READ_BUFFER_SIZE)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9b963de0d5a5c2bd — Filesystem access.

pkgs/python/[email protected]/psutil/_common.py:692

    fobj = open(  # noqa: SIM115
        fname,
        buffering=FILE_READ_BUFFER_SIZE,
        encoding=ENCODING,
        errors=ENCODING_ERRS,
    )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10911a4293c76a9d — Environment-variable access.

pkgs/python/[email protected]/psutil/_psaix.py:375

        for path in os.environ["PATH"].split(":"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #803034a777c2f832 — Filesystem access.

pkgs/python/[email protected]/psutil/_psbsd.py:142

        with open('/proc/meminfo', 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3eaf1f99824d1d99 — Filesystem access.

pkgs/python/[email protected]/psutil/_psbsd.py:276

        with open('/proc/stat', 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f302881fb6da954b — Environment-variable access.

pkgs/python/[email protected]/psutil/_pssunos.py:119

            f"PATH=/usr/sbin:/sbin:{os.environ['PATH']}",

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e529e76a1a3303a4 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/convert_readme.py:33

    with open(args.file) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #81c6f9f9a37fcb47 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/download_wheels.py:64

    with open(OUTFILE, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #0433bae9e4461e14 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/download_wheels.py:87

        with open(os.path.expanduser(args.tokenfile)) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #8c00945dc07d129e — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:98

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #86dc9cefceadddd7 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:113

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a579d7d2b763bf68 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:134

    with open(fname) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #c14368aa96bbe91e — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:164

    with open(fname, errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #04d153d63fee6de8 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/find_broken_links.py:178

        with open(fname, errors='ignore') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #a48532e071125467 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/git_pre_commit.py:156

    with open("MANIFEST.in", encoding="utf8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress tooling Excluded from app score unreachable #0f5e3e1d9378c00d — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/scripts/internal/install_pip.py:34

        req = urlopen(URL, **kwargs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs tooling Excluded from app score unreachable #f5623cb7080d522f — Filesystem access.

pkgs/python/[email protected]/scripts/internal/print_announce.py:81

    with open(HISTORY) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #60531639d5a976b8 — Environment-variable access.

pkgs/python/[email protected]/scripts/internal/print_downloads.py:42

    env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #83d1b53c54f1cc78 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/print_hashes.py:18

    with open(file, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #fd9803a423e8e536 — Filesystem access.

pkgs/python/[email protected]/scripts/internal/purge_installation.py:56

                with open(path) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #b655d3751eafbeda — Filesystem access.

pkgs/python/[email protected]/scripts/internal/purge_installation.py:64

                    with open(path, "w") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7db05dacc0f61ff8 — Environment-variable access.

pkgs/python/[email protected]/setup.py:46

        if "CIBUILDWHEEL" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #048cb6c89c0a7078 — Filesystem access.

pkgs/python/[email protected]/setup.py:142

    with open(INIT) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2017c8554420c3d5 — Environment-variable access.

pkgs/python/[email protected]/setup.py:258

        if os.getenv('CC'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f7a1fa2b58dee9d0 — Environment-variable access.

pkgs/python/[email protected]/setup.py:259

            compiler.set_executable('compiler_so', os.getenv('CC'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

pydantic

python dependency

expand_more 9 low-confidence finding(s)

low env_fs dependency Excluded from app score #c6c1474b5dab521f — Filesystem access.

pkgs/python/[email protected]/pydantic/deprecated/parse.py:71

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6add27d08a26e7f6 — Environment-variable access.

pkgs/python/[email protected]/pydantic/json_schema.py:337

                if os.getenv('PYDANTIC_PRIVATE_ALLOW_UNHANDLED_SCHEMA_TYPES'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2f66294775663b98 — Filesystem access.

pkgs/python/[email protected]/pydantic/mypy.py:1373

    with open(config_file, 'rb') as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1e53e2d311512956 — Environment-variable access.

pkgs/python/[email protected]/pydantic/plugin/_loader.py:27

    disabled_plugins = os.getenv('PYDANTIC_DISABLE_PLUGINS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c3a1be3152a1d50 — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:173

            env_vars: Mapping[str, Optional[str]] = os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd4251bc9ff55752 — Environment-variable access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:175

            env_vars = {k.lower(): v for k, v in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ef6bdc192650a8e — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/env_settings.py:307

                    secret_value = path.read_text().strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0283794c81bb72b0 — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/mypy.py:948

    with open(config_file, read_mode) as rf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d6145e6c4f7cc03d — Filesystem access.

pkgs/python/[email protected]/pydantic/v1/parse.py:57

    b = path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

python-dotenv

python dependency

expand_more 11 low-confidence finding(s)

low env_fs dependency Excluded from app score #42ab93d3dd8b858c — Filesystem access.

pkgs/python/[email protected]/src/dotenv/cli.py:76

        with open(path) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5637adb2614da632 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/cli.py:194

        if v is not None and (override or k not in os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #69d3b67428a2c03a — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/cli.py:225

    cmd_env = os.environ.copy()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5aa5799e98a3b4ec — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:26

    if "PYTHON_DOTENV_DISABLED" not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dd2070bdd005c380 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:28

    value = os.environ["PYTHON_DOTENV_DISABLED"].casefold()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9f9b1ff4e1cdafce — Filesystem access.

pkgs/python/[email protected]/src/dotenv/main.py:63

            with open(self.dotenv_path, encoding=self.encoding) as stream:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40bba2f733ffeb57 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:105

            if k in os.environ and not self.override:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b4b83494df8801cb — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:108

                os.environ[k] = v

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fdc8d4607fe8eaa6 — Filesystem access.

pkgs/python/[email protected]/src/dotenv/main.py:148

        source: IO[str] = open(path, encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bd11e15dc0869c48 — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:302

                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a27bafe09705ed4b — Environment-variable access.

pkgs/python/[email protected]/src/dotenv/main.py:306

                env.update(os.environ)  # type: ignore

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

requests

python dependency

expand_more 8 low-confidence finding(s)

low env_fs dependency Excluded from app score #56286eecf245ee3e — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:857

                    os.environ.get("REQUESTS_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b5b89b4340066c8f — Environment-variable access.

pkgs/python/[email protected]/src/requests/sessions.py:858

                    or os.environ.get("CURL_CA_BUNDLE")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7133a7ed2cbdcc16 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:239

    netrc_file = os.environ.get("NETRC")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5523fa9073a082ae — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:798

        old_value = os.environ.get(env_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ec4e6d4355bfdbe5 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:799

        os.environ[env_name] = value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #db52160abfab81b6 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:805

                del os.environ[env_name]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3e0f7a4fec3c5b89 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:807

                os.environ[env_name] = old_value

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3f5f1caa1c4cccd1 — Environment-variable access.

pkgs/python/[email protected]/src/requests/utils.py:820

        return os.environ.get(key) or os.environ.get(key.upper())

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

schedule

python dependency

expand_more 4 low-confidence finding(s)

low env_fs dependency Excluded from app score #bb88fbc5e6dcad04 — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:29

os.environ["TZ"] = TZ_BERLIN

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #320bdad4e5a8741c — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:80

        self.original_zone = os.environ.get("TZ")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0a98b9ca36e51560 — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:82

            os.environ["TZ"] = self.zone

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4ef1914e98b98433 — Environment-variable access.

pkgs/python/[email protected]/test_schedule.py:92

            os.environ["TZ"] = self.original_zone

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

setuptools

python dependency

expand_more 162 low-confidence finding(s)

low env_fs dependency Excluded from app score #aab2a09f3ccdc284 — Environment-variable access.

pkgs/python/[email protected]/_distutils_hack/__init__.py:49

    which = os.environ.get('SETUPTOOLS_USE_DISTUTILS', 'local')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f95c3dc16d0ef8af — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/command/_framework_compat.py:22

    ensurepip = os.environ.get("ENSUREPIP_OPTIONS")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #848b35e823e45a9b — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/bdist_rpm.py:555

                    with open(val) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #010698a9959977fb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/command/build_ext.py:800

                elif '_PYTHON_HOST_PLATFORM' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #634b37c55db38022 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/build_scripts.py:105

            with open(outfile, "w", encoding=f.encoding) as outf:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1eea027e538351bb — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:104

        with open(filename, "w", encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7e4c91cac2202369 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:191

        with open(out, encoding='utf-8') as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cfa409b34adb779e — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/config.py:348

    log.info(pathlib.Path(filename).read_text(encoding='utf-8'))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3435fe53c9421725 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/install_egg_info.py:55

        with open(target, 'w', encoding='UTF-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1ff94bbe379759b9 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/sdist.py:424

        with open(self.manifest, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d4bc4603edb30624 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/command/sdist.py:434

        with open(self.manifest, encoding='utf-8') as lines:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #749b591f833cc8be — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:73

        self.cc = os.environ.get('CC', self.cc or 'gcc')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #dbc61589aabef416 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:74

        self.cxx = os.environ.get('CXX', self.cxx or 'g++')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fefee3de168412e3 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/cygwin.py:318

        config_h = pathlib.Path(fn).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #88d8ab71a62d53dc — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:82

    root = os.environ.get("ProgramFiles(x86)") or os.environ.get("ProgramFiles")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e1787338704f7892 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:151

    if os.getenv("DISTUTILS_USE_SDK"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #eaa1587bff87be76 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:152

        return {key.lower(): value for key, value in os.environ.items()}

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5a0ba59172e3cb19 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:190

        paths = os.getenv('path').split(os.pathsep)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a0987da58bf49a2 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/msvc.py:562

        env = dict(os.environ, PATH=self._paths)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b7d463d11ce5ceb — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/compilers/C/zos.py:114

            if (binary := os.environ.get(envvar, None))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f4196b52ed601507 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/debug.py:5

DEBUG = os.environ.get('DISTUTILS_DEBUG')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3fd9cf0c8ba48ca5 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:387

            yield pathlib.Path(os.getenv("DIST_EXTRA_CONFIG"))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #128b1131401f35ec — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:1141

            self.read_pkg_file(open(path))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d217ab86c86d5fbe — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/dist.py:1216

        with open(
            os.path.join(base_dir, 'PKG-INFO'), 'w', encoding='UTF-8'
        ) as pkg_info:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c54a5fd556d015ba — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:28

            fsrc = open(src, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #353f569502f39245 — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:39

            fdst = open(dst, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4b73c0eab4a71aba — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/file_util.py:227

    with open(filename, 'w', encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #10dc078df19e9cdd — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/spawn.py:52

    return os.environ if env is None else env

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c24899f04abf570f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/spawn.py:111

        path = os.environ.get('PATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #43e87e54115abe1a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:48

if "_PYTHON_PROJECT_BASE" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0676e1ea081f5d1c — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:49

    project_base = os.path.abspath(os.environ["_PYTHON_PROJECT_BASE"])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ba957a082ad5483 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:330

        if 'CC' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b8b92a5a24a98624 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:331

            newcc = os.environ['CC']

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f513d865f15e4e26 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:332

            if 'LDSHARED' not in os.environ and ldshared.startswith(cc):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0454194811f813c — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:337

        cxx = os.environ.get('CXX', cxx)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0f99bf35800a5dc4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:338

        ldshared = os.environ.get('LDSHARED', ldshared)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab101dabdb75ff8f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:339

        ldcxxshared = os.environ.get('LDCXXSHARED', ldcxxshared)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #706cdf916d6c7623 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:340

        cpp = os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9073ebedfe4cf17b — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:340

        cpp = os.environ.get(
            'CPP',
            cc + " -E",  # not always
        )

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #990cb72233dd6007 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:347

        cflags = os.environ.get('CFLAGS', cflags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aef9d426710d9b50 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:349

        cxxflags = os.environ.get('CXXFLAGS', cxxflags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d9bf75b76affbf38 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:357

        ar = os.environ.get('AR', ar)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ee040a213e0df1e4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:359

        archiver = ar + ' ' + os.environ.get('ARFLAGS', ar_flags)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c6ba3cae99f7113a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:376

        if 'RANLIB' in os.environ and compiler.executables.get('ranlib', None):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0ee3934b48a849a0 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:377

            compiler.set_executables(ranlib=os.environ['RANLIB'])

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f93a34b422e11089 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:472

                elif n in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d7270e3eb3198423 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:474

                    item = os.environ[n]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #973d1116e491fb93 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/sysconfig.py:597

    flags = os.environ.get(f'{type}FLAGS')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2486b90902f40b5b — Filesystem access.

pkgs/python/[email protected]/setuptools/_distutils/text_file.py:118

        self.file = open(self.filename, errors=self.errors, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9d81a1f1b79722c5 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:57

        target = os.environ.get('VSCMD_ARG_TGT_ARCH')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f55aee1b7c224d37 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:94

    env_ver = os.environ.get(MACOSX_VERSION_VAR)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2e06898d9438c674 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:174

    if os.name == 'posix' and 'HOME' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c7cbbdda8412be4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:178

            os.environ['HOME'] = pwd.getpwuid(os.getuid())[5]

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #5c24ac82ecd006d1 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:184

    if 'PLAT' not in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d6f05be2689487a — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:185

        os.environ['PLAT'] = get_platform()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #61e90ed4f8e4b9b4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_distutils/util.py:199

    lookup = dict(os.environ)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #324d5ba6a4510c96 — Filesystem access.

pkgs/python/[email protected]/setuptools/_imp.py:65

            file = open(path, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0c01c03a66ba5d89 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:80

    orig_pythonpath = os.environ.get('PYTHONPATH', nothing)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #106c5297f273a845 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:81

    current_pythonpath = os.environ.get('PYTHONPATH', '')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6d56728d5d67929f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:87

            os.environ['PYTHONPATH'] = new_path

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fbc29bb13bda8da7 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:91

            os.environ.pop('PYTHONPATH', None)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f0b748ecaf4b034f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_path.py:93

            os.environ['PYTHONPATH'] = orig_pythonpath

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f440803e030576c8 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:49

        return os.environ.get('__PYVENV_LAUNCHER__', _default)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cf6a414e49258ee4 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:238

        launcher = os.environ.get('SETUPTOOLS_LAUNCHER', 'executable')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0444c44c4d04fa60 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_scripts.py:245

        if ext not in os.environ['PATHEXT'].lower().split(';'):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #311cbcf60975e0c5 — Filesystem access.

pkgs/python/[email protected]/setuptools/_scripts.py:332

    return resources.files('setuptools').joinpath(launcher_fn).read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7b85f6b6accd08c8 — Filesystem access.

pkgs/python/[email protected]/setuptools/_scripts.py:337

    return res.read_text(encoding='utf-8') % vars()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8ec71f305fe2c91d — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/autocommand/autoparse.py:330

        with open(filename_or_file, *args, **kwargs) as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b13c1d737320da1d — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2829

            t = open(fileobj=name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c0ef5932e36a3db0 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2832

            t = open(name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #415c063acb35e057 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/backports/tarfile/__init__.py:2872

            with open(src, 'r') as tar:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #665e5f8c16a0968e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:379

        return self.locate().read_text(encoding=encoding)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d627a806b44d176 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:382

        return self.locate().read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecaa711b2de140f9 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:527

            self.read_text('METADATA')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0582f70785f0ff1 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:528

            or self.read_text('PKG-INFO')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bdbf1be1b6bd37ae — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:532

            or self.read_text('')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ab395864e263062b — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:567

        return EntryPoints._from_text_for(self.read_text('entry_points.txt'), self)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9154cba6b6797f59 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:616

        text = self.read_text('RECORD')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c14acf5b32ee5b1e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:630

        text = self.read_text('installed-files.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f48a53f980588ed0 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:659

        text = self.read_text('SOURCES.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d1f42b2fe74f6e01 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:672

        source = self.read_text('requires.txt')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41db58519b6099ba — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:723

            self.read_text(filename),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #adf08f6034236197 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:1014

            return self._path.joinpath(filename).read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #886ce121129b0cc6 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/importlib_metadata/__init__.py:1150

    return (dist.read_text('top_level.txt') or '').split()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4a4b10b121402cef — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/jaraco/text/__init__.py:232

lorem_ipsum: str = (
    files(__name__).joinpath('Lorem ipsum.txt').read_text(encoding='utf-8')
)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8f31607d6d452546 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/jaraco/text/__init__.py:631

    with open(filename, encoding='utf-8') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4eba5dd828b4c712 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/packaging/_manylinux.py:34

        with open(path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #58aa4e68758968be — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/packaging/_musllinux.py:46

        with open(executable, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e7ce7cfc0a6027f7 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/__init__.py:31

    if os.getenv("ANDROID_DATA") == "/data" and os.getenv("ANDROID_ROOT") == "/system":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a1371bf50a181608 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/__init__.py:32

        if os.getenv("SHELL") or os.getenv("PREFIX"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #beb20fd55529ad80 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:45

        path = os.environ.get("XDG_DATA_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #af447225e7ce7995 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:52

        path = os.environ.get("XDG_DATA_DIRS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #41957ebd2704a630 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:76

        path = os.environ.get("XDG_CONFIG_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #22834da859b59666 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:83

        path = os.environ.get("XDG_CONFIG_DIRS", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1319dffd57a75a54 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:107

        path = os.environ.get("XDG_CACHE_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #40155ad43f4168ab — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:123

        path = os.environ.get("XDG_STATE_HOME", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecf3c708f44b0791 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:177

        path = os.environ.get("XDG_RUNTIME_DIR", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #feb0c47090aaa069 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:201

        path = os.environ.get("XDG_RUNTIME_DIR", "")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d0be0c27fceff41c — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/unix.py:238

        media_dir = os.environ.get(env_var, "").strip()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c66a882f5f60ab5d — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:157

    result = os.environ.get(env_var_name)

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0abff9a56635936f — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:167

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Documents")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #aaeb5e1c93b0bbe0 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:170

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Downloads")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8dffdf3456652041 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:173

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Pictures")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #11513d6cc8b55054 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:176

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Videos")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba67902975c2e55c — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/platformdirs/windows.py:179

        return os.path.join(os.path.normpath(os.environ["USERPROFILE"]), "Music")  # noqa: PTH118

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b6fdf59f99a28c47 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:492

        with open(wheelfile_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d8ab2e77985960e2 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:598

            with open(dependency_links_path, encoding="utf-8") as dependency_links_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #59a38918186f029a — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_bdist_wheel.py:609

        with open(pkg_info_path, "w", encoding="utf-8") as out:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1f88ba3901a3d30e — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:171

                        requires = path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0d2021f8e12ff6dd — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:174

                        pkginfo = path.read_text("utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7f6ab6cfe99173b6 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:184

                            path.read_bytes(),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #1d49a54b9f2ba9d5 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/convert.py:190

                yield str(path.relative_to(self.path)), path.read_bytes()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #691022c10bbc7597 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/pack.py:40

    with open(wheel_file_path, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3a89ded4c5245ee2 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_commands/pack.py:60

            with open(wheel_file_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4497314ce981a471 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_metadata.py:151

    with open(pkginfo_path, encoding="utf-8") as headers:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #765665bf1b39194b — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/_metadata.py:160

        with open(requires_path, encoding="utf-8") as requires_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6ba4b65e719e271b — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:293

    with open(path_to_lib, "rb") as lib_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #077134ced0893732 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:419

    if "MACOSX_DEPLOYMENT_TARGET" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #19e53a3883ca5e00 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:421

            int(x) for x in os.environ["MACOSX_DEPLOYMENT_TARGET"].split(".")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9c9680b0baf1f3e8 — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/macosx_libfile.py:474

        if "MACOSX_DEPLOYMENT_TARGET" in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #de6885b553d7157c — Environment-variable access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/wheelfile.py:53

    timestamp = int(os.environ.get("SOURCE_DATE_EPOCH", timestamp or time.time()))

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ecdcbacafb5b36f7 — Filesystem access.

pkgs/python/[email protected]/setuptools/_vendor/wheel/wheelfile.py:185

        with open(filename, "rb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2c2e103f853acf91 — Filesystem access.

pkgs/python/[email protected]/setuptools/archive_util.py:133

            with open(target, 'wb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b79cd23ad6b881bb — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:71

    with open(pyfile, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e05b1590c5cfc493 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:212

            with open(native_libs, 'wt', encoding="utf-8") as libs_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #cb807739f5980388 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:363

            with open(fn, 'wt', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f971498d393ebdb7 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_egg.py:382

    f = open(filename, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d061b0980414c2d0 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_wheel.py:475

        with open(wheelfile_path, "wb") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #afb9c165d3127c46 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/bdist_wheel.py:575

        with open(dependency_links_path, encoding="utf-8") as dependency_links_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #a556a023ff2eabd2 — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/build_ext.py:160

        so_ext = os.getenv('SETUPTOOLS_EXT_SUFFIX')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #2ec620787631e223 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_ext.py:354

        with open(stub_file, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0233ba2819d794ee — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_py.py:192

            files = manifest.read_text(encoding="utf-8").splitlines()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #b0939629b8ebc1f1 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/build_py.py:261

        with open(init_py, 'rb') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #bfef5ffcf896a6aa — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/easy_install.py:18

            sys_executable=os.environ.get(

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #0b02b982e09c7e94 — Environment-variable access.

pkgs/python/[email protected]/setuptools/command/easy_install.py:18

            sys_executable=os.environ.get(
                "__PYVENV_LAUNCHER__", os.path.normpath(sys.executable)
            ),

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3ffa8edec01fd2b9 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/editable_wheel.py:601

        path1.write_text("file1", encoding="utf-8")

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #810bb0a120610cdd — Filesystem access.

pkgs/python/[email protected]/setuptools/command/editable_wheel.py:604

            if path2.is_symlink() and path2.read_text(encoding="utf-8") == "file1":

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #33d73afcde19a068 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/egg_info.py:309

        f = open(filename, 'wb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #9dfd451ad514140c — Filesystem access.

pkgs/python/[email protected]/setuptools/command/egg_info.py:671

    with open(filename, "wb") as f:  # always write POSIX-style manifest

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #42272541bf309597 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/install_scripts.py:64

        with open(target, "w" + mode, encoding=encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c18fd21bd5bfe43a — Filesystem access.

pkgs/python/[email protected]/setuptools/command/sdist.py:195

        with open(self.manifest, 'rb') as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ac63710adb0efea0 — Filesystem access.

pkgs/python/[email protected]/setuptools/command/sdist.py:205

        manifest = open(self.manifest, 'rb')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #385fd522f4e2bb6c — Filesystem access.

pkgs/python/[email protected]/setuptools/command/setopt.py:67

    with open(filename, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #4befc22a8e8413ec — Environment-variable access.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/error_reporting.py:81

        debug_code = os.getenv("JSONSCHEMA_DEBUG_CODE_GENERATION", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low egress dependency Excluded from app score #96afee654f71d6bc — Hardcoded external endpoint. Review what data is sent to this destination.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/formats.py:158

    with urlopen(url, context=context) as response:  # noqa: S310 (audit URLs)

Data is sent to a hardcoded external endpoint; review what leaves the process.

Fix: Verify the destination and that only non-sensitive data is sent; pin and audit the dependency.

low env_fs dependency Excluded from app score #cbf2ed51c1f86b2f — Environment-variable access.

pkgs/python/[email protected]/setuptools/config/_validate_pyproject/formats.py:192

        if os.getenv("NO_NETWORK") or os.getenv("VALIDATE_PYPROJECT_NO_NETWORK"):

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #35c8ad8ec80a187c — Filesystem access.

pkgs/python/[email protected]/setuptools/config/expand.py:57

        module = ast.parse(pathlib.Path(spec.origin).read_bytes())  # type: ignore[arg-type] # Let it raise an error on None

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #d427f359a61cffea — Filesystem access.

pkgs/python/[email protected]/setuptools/config/expand.py:142

    with open(filepath, encoding='utf-8') as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6e2c00a2073a5cc8 — Filesystem access.

pkgs/python/[email protected]/setuptools/config/pyprojecttoml.py:39

    with open(filepath, "rb") as file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #fb8ddf48611eabb8 — Filesystem access.

pkgs/python/[email protected]/setuptools/dist.py:586

            with open(filename, encoding='utf-8') as reader:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #8e69aa1c7d0e5c0c — Filesystem access.

pkgs/python/[email protected]/setuptools/dist.py:820

            with open(readme_txt_filename, 'w', encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #7c1631a79ff8b59b — Environment-variable access.

pkgs/python/[email protected]/setuptools/installer.py:82

    quiet = 'PIP_QUIET' not in os.environ and 'PIP_VERBOSE' not in os.environ

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #01722b11389641f8 — Environment-variable access.

pkgs/python/[email protected]/setuptools/installer.py:83

    if 'PIP_INDEX_URL' in os.environ:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #6c84f198588828df — Filesystem access.

pkgs/python/[email protected]/setuptools/msvc.py:462

                with open(state_path, 'rt', encoding='utf-8') as state_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c01dfd319efd60c3 — Filesystem access.

pkgs/python/[email protected]/setuptools/namespaces.py:23

        with open(filename, 'wt', encoding=py312.PTH_ENCODING) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #f1070033a4e1271b — Filesystem access.

pkgs/python/[email protected]/setuptools/unicode_utils.py:73

        with open(file, "r", encoding="utf-8") as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #3cd18b33d140273b — Filesystem access.

pkgs/python/[email protected]/setuptools/unicode_utils.py:77

        with open(file, "r", encoding=fallback_encoding) as f:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #c3ebc76ac40cab0b — Environment-variable access.

pkgs/python/[email protected]/setuptools/warnings.py:109

    enforce = os.getenv("SETUPTOOLS_ENFORCE_DEPRECATION", "false").lower()

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #ba4b42508667bd1a — Filesystem access.

pkgs/python/[email protected]/setuptools/wheel.py:261

                    with open(mod_init, 'w', encoding="utf-8") as fp:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #e821f73e132c73db — Environment-variable access.

pkgs/python/[email protected]/tools/build_launchers.py:102

        os.environ['ProgramFiles(x86)'],

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #7e525f339eff05d8 — Filesystem access.

pkgs/python/[email protected]/tools/finalize.py:39

    changelog = changelog_fn.read_text(encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs tooling Excluded from app score unreachable #61ce666ba0e5bc6b — Filesystem access.

pkgs/python/[email protected]/tools/finalize.py:41

    changelog_fn.write_text(fixed, encoding='utf-8')

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

toml

python dependency

expand_more 2 low-confidence finding(s)

low env_fs dependency Excluded from app score #6b90ec0e1c9cc6e4 — Filesystem access.

pkgs/python/[email protected]/setup.py:8

with open("README.rst") as readme_file:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

low env_fs dependency Excluded from app score #e6eed574ee849c1f — Filesystem access.

pkgs/python/[email protected]/toml/decoder.py:133

        with io.open(_getpath(f), encoding='utf-8') as ffile:

Reads environment variables or the filesystem — an inventory-level capability, not a leak on its own.

Fix: Usually benign; confirm any secret read here is not later sent externally.

Skipped dependencies

Production

asyncio prod — no python source in sdist

verified_user Application data leak confirmed

App Privacy Score

bar_chart Score Breakdown

list Scan Summary

swap_horiz Confirmed data exfiltration in application code

</> First-Party Code

first-party (python)

</> Dependencies

litellm

mcp

rich

PyYAML

httpx

loguru

networkx

psutil

pydantic

python-dotenv

requests

schedule

setuptools

toml

Skipped dependencies