Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50067 analyzed
8096 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- HIGH committed secret mubit-ai/plugins GitHub token
ghp_16…(40 chars, redacted) - HIGH dynamic exec LangeVC/skillweave __import__ sink
assert result.pid != __import__("os").getpid() - HIGH dynamic exec LangeVC/skillweave __import__()
__import__(module_name, fromlist=["_"]) - HIGH dynamic exec LangeVC/skillweave __import__()
__import__(mod_name) - HIGH dynamic exec LangeVC/skillweave __import__()
__import__(mod) - HIGH dynamic exec LangeVC/skillweave eval()/exec()
result = eval(compile(tree, "<condition>", "eval"), safe_ns) # noqa: S307 - HIGH dynamic exec LangeVC/skillweave __import__ sink
env={**dict(__import__("os").environ), **env}, - HIGH dynamic exec dip497/hivemind eval()
async eval([...rest]) { - MEDIUM suspicious endpoint eriknewton/concordia-protocol 169.254.169.254 (cloud metadata)
"mandate-123", "https://169.254.169.254/latest/meta-data/" - MEDIUM suspicious endpoint eriknewton/concordia-protocol 93.184.216.34
out = validate_revocation_endpoint("https://93.184.216.34/list") - MEDIUM suspicious endpoint uniatrix/claude-telegram-bridge api.telegram.org
API = "https://api.telegram.org/bot%s" % TOKEN - MEDIUM suspicious endpoint PrimeUpYourLife/dynamic-telegram-bot-api-mcp api.telegram.org
gramClient({ token: "secret", baseUrl: "https://api.telegram.org", timeoutMs: 1000, retries: 0, limiter: new RateLimiter(100, 100), logger: new Logger("error"), fetchImplementation: mockedFetch }); - MEDIUM suspicious endpoint PrimeUpYourLife/dynamic-telegram-bot-api-mcp api.telegram.org
expect(requestedUrls).toEqual(["https://api.telegram.org/botproject-token/getMe"]); - MEDIUM suspicious endpoint PrimeUpYourLife/dynamic-telegram-bot-api-mcp api.telegram.org
TELEGRAM_API_BASE_URL: z.string().url().default("https://api.telegram.org"), - HIGH committed secret nitrostack committed .env
env file shipped with populated values