A local parser can still leak a secret through its UI or telemetry. EnvCheck designs the result model around names and issue types only.
No result field contains a value
Comparison lists, duplicate evidence and redacted copies use variable names only.
Analytics stays coarse
Only action outcomes and key-count buckets are eligible; names, values, source lines and issue details are excluded.