requests-toolbelt 1.0.0

Source: https://github.com/requests/toolbelt
Tag scanned: 1.0.0
Compared with: 0.10.1 (0 signals introduced since)
Files: 83 scanned, 19 skipped (binary, oversized, or unrecognised)
Signals: 0 critical · 0 warn · 3 info
Scan time: 3.3 s
LLM review: Reviewed by claude-haiku-5-5 (Anthropic): 3 of 3 warn and critical signals; 3 demoted to info.
Disclude version: 4.1.0
Scanned (UTC): 2026-10-22 03:45

Signals

Ordered by severity, then signals introduced in this release. Hidden characters are shown as ⟨U+…⟩.

info ~~warn~~ → info by review dynamic-execution examples/monitor/progress_bar.py:28:43

`open(__file__)` — file reads its own source, common pattern for extracting payloads hidden in comments (ast pass, confidence 0.85)
```
        'another_form_field': 'another value',
        'first_file': ('progress_bar.py', open(__file__, 'rb'), 'text/plain'),
        'second_file': ('progress_bar.py', open(__file__, 'rb'),
                        'text/plain'),
```
likely benign LLM, confidence 0.90 Example script opens its own source file to attach it as a form upload in a progress-bar demo.
Reasoning
This is an example script in a requests-toolkit style monitor demo that opens its own file as a multipart upload payload. Reading __file__ to upload the script itself is a demo convenience, not payload extraction; there is no decoding or execution of the bytes.
info ~~warn~~ → info by review dynamic-execution examples/monitor/progress_bar.py:29:44

`open(__file__)` — file reads its own source, common pattern for extracting payloads hidden in comments (ast pass, confidence 0.85)
```
        'first_file': ('progress_bar.py', open(__file__, 'rb'), 'text/plain'),
        'second_file': ('progress_bar.py', open(__file__, 'rb'),
                        'text/plain'),
        })
```
likely benign LLM, confidence 0.90 Second form field in the same demo uploads the script's own source file.
Reasoning
Same pattern as the adjacent finding: the second multipart field re-opens the script's own source for upload. The file bytes are sent as form data, not executed or used to recover hidden content.
info ~~warn~~ → info by review dynamic-execution setup.py:10:5

`os.system` called with a literal shell command (ast pass, confidence 0.70)
```
if sys.argv[-1].lower() in ("submit", "publish"):
    os.system("python setup.py bdist_wheel sdist upload")
    sys.exit()
```
likely benign LLM, confidence 0.90 Packaging helper that runs a fixed build-and-upload shell command when invoked with submit or publish.
Reasoning
A standard setup.py publish helper that runs a fixed literal command, gated on the sys.argv value 'submit' or 'publish'. No attacker-controlled input or encoded payload is involved; this is a common maintainer convenience pattern.

Reproduce This Scan

Run disclude locally to verify. Add --format sarif for SARIF output. Add --llm (with an API key in the environment) to include the LLM review.

cargo install disclude --version 4.1.0
git clone https://github.com/requests/toolbelt toolbelt && cd toolbelt
git checkout 1.0.0
disclude scan --severity info --diff 0.10.1 .