T09 · Insecure Skill Coding Practices
Warning
- Location
scripts/ingest.py:869- Finding
Configurable plaintext endpoints can expose judgment records and party information
- Content
View full analysis
List[List[float]]: """Embed texts via Ollama /api/embeddings. Ollama endpoint: http://host:11434 """ url = ollama.rstrip("/") + "/api/embeddings" vecs: List[List[float]] = [] for t in texts: r = requests.post(url, json={"model": model, "prompt": t}, timeout=timeout) r.raise_for_status() data = r.json() emb = data.get("embedding") if not isinstance(emb, list): raise RuntimeError(f"Unexpected Ollama response: {data}") vecs.append(emb) return vecs ``` `scripts/ingest.py:899-908`: ```python def upsert_batched(client: QdrantClient, collection: str, points: List[qm.PointStruct], *, batch_size: int = 64) -> int: """Upsert points in batches to avoid Qdrant request payload size limits (default 32MB).""" if not points: return 0 total = 0 for i in range(0, len(points), batch_size): batch = points[i : i + batch_size] client.upsert(collection_name=collection, points=batch) total += len(batch) return total ``` `scripts/ingest.py:964-965`: ```python ap.add_argument("--ollama", default=os.environ.get("OLLAMA_URL", "http://localhost:11434")) ap.add_argument("--qdrant", default=os.environ.get("QDRANT_URL", "http://localhost:6333")) ``` Representative sensitive Qdrant payload from `scripts/ingest.py:1057-1078`: ```python doc_payload: Dict[str, Any] = { "point_id": doc_id, "source_run": source_run, "system": "FJUD", "title": title, "court": meta.get("court"), "court ...[truncated 4495 chars]- Remediation
View remediation