Tainted flow: 'req' from os.environ.get (line 112, credential/environment) → urllib.request.urlopen (network output)
Critical
- Category
- Data Flow
- Content
}, ) with urllib.request.urlopen(req, timeout=30) as resp: result = json.loads(resp.read().decode("utf-8")) text = result["choices"][0]["message"]["content"].strip()- Confidence
- 97% confidence
- Finding
- The code sends a full base64-encoded screenshot to a remote endpoint constructed in part from environment-controlled configuration, which creates a direct exfiltration path for highly sensitive private chat content. In this skill’s context, the screenshots likely contain intimate conversations and personal data, so transmitting them off-device materially increases privacy and data-handling risk.