Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51197 analyzed
7502 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- MEDIUM over-broad oauth scope BrianArfi/ai-second-brain https://www.googleapis.com/auth/documents
DOCS_SCOPE = "https://www.googleapis.com/auth/documents" - MEDIUM over-broad oauth scope BrianArfi/ai-second-brain https://www.googleapis.com/auth/drive
tok, ["https://www.googleapis.com/auth/drive"]) - HIGH dynamic exec aibo204/dsh-plugin-computer-use new Function()
new Function(""); - HIGH hidden prompt harshsinghmp/skills skill: skill-exfil
secret→sink: 3. Wire `next.config.mjs` with `withPayload` and add `"@payload-config": ["./src/payload.config.ts"]` to `tsconfig.json` paths. - MEDIUM suspicious endpoint lhs1695/wechat-article-reader 1.1.1.1
"http://1.1.1.1/article", - MEDIUM suspicious endpoint lhs1695/wechat-article-reader 8.8.8.8
"http://8.8.8.8/article", - HIGH dynamic exec hudhaifahz/nostr-signer-chatgpt new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec hudhaifahz/nostr-signer-chatgpt new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec nicofirst1/premura __import__ sink
"PATH": __import__("os").environ.get("PATH", ""), - HIGH dynamic exec 3esign/ratchetx eval()
const TYPVOL = eval('(' + src.match(/const TYPVOL = (\{[^}]*\})/)[1] + ')'); - HIGH obfuscation 3esign/ratchetx dynamic require()/import()
const proofHandler = require(`..${url.pathname}.js`); - HIGH dynamic exec 3esign/ratchetx vm exec
const write = vm.runInNewContext(body + '\nbumpFeed', { ...kv, require, Date }); - HIGH obfuscation 3esign/ratchetx dynamic require()/import()
const { loadWeb3, confirmWithHttp } = await import(ROOT + 'skills/ratchetx-g2/scripts/g2-session.mjs'); - HIGH obfuscation 3esign/ratchetx dynamic require()/import()
const m = await import('data:text/javascript;base64,' + b64); - MEDIUM suspicious endpoint kylereid1017/threat-detection-lab 169.254.169.254 (cloud metadata)
"CommandLine": 'curl -s -X PUT "http://169.254.169.254/latest/api/token" -H "X-aws-ec2-metadata-token-ttl-seconds: 21600"',