Env Variable Harvesting
High
- Category
- Data Exfiltration
- Content
elif query_alias and query_alias in normalized_name: score += 85 for token in keyword_tokens: if token == name: score += 120 elif token in name:- Confidence
- 80% confidence
- Finding
- Code enumerates, copies, or searches environment variables for secrets. Bulk environment access can collect credentials unrelated to the skill's stated purpose.
