Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50029 analyzed
8115 re-analysis due
988 not analyzable
0 not yet analyzed
4801 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11823
- obfuscation 3573
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187726
- HIGH obfuscation samuelgursky/davinci-resolve-mcp dynamic require()/import()
const parse = require(`${V}/parse/index.js`); - MEDIUM suspicious endpoint agent-nuvira api.telegram.org
const r = await fetch(`https://api.telegram.org/bot${token}/getMe`, { signal: AbortSignal.timeout(10_000) }); - MEDIUM suspicious endpoint agent-nuvira api.telegram.org
const url = `https://api.telegram.org/bot${token}/sendMessage`; - MEDIUM suspicious endpoint agent-nuvira api.telegram.org
return fetch(`https://api.telegram.org/bot${this.token}/${method}`, { - MEDIUM suspicious endpoint agent-nuvira api.telegram.org
const res = await fetch(`https://api.telegram.org/bot${token}/getMe`, { signal: AbortSignal.timeout(10_000) }); - MEDIUM suspicious endpoint @hasna/attachments 169.254.169.254 (cloud metadata)
Endpoint2["IPv4"] = "http://169.254.169.254"; - HIGH dynamic exec @hasna/attachments new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - MEDIUM suspicious endpoint @tableau/mcp-server 169.254.169.254 (cloud metadata)
,t.prototype)}},_E;(function(t){t.IPv4="http://169.254.169.254",t.IPv6="http://[fd00:ec2::254]"})(_E||(_E={}));var NSt="AWS_EC2_METADATA_SERVICE_ENDPOINT",DSt="ec2_metadata_service_endpoint",MSt={envi - HIGH credential in log @mcp-use/modelcontextprotocol-sdk credential in log
console.log(`🔑 Received API key \x1b[32m${apiKey}\x1b[0m for session ${sessionId}`); - HIGH credential in log @mcp-use/modelcontextprotocol-sdk credential in log
console.log(`🔑 Received API key \x1b[32m${apiKey}\x1b[0m for session ${sessionId}`); - MEDIUM suspicious endpoint @smartbear/mcp app.bugsnag.com (telemetry)
link: "https://app.bugsnag.com/my-org/my-project/errors/6863e2af8c857c0a5023b411?event_id=6863e2af012caf1d5c320000" - MEDIUM suspicious endpoint @smartbear/mcp api.bugsnag.com (telemetry)
nextUrl: "https://api.bugsnag.com/projects/515fb9337c1074f6fd000003/errors?base=2025-08-29T13%3A11%3A37Z&direction=desc&filters%5Berror.status%5D%5B%5D%5Btype%5D=eq&filters%5Berror.status%5D%5B%5D%5Bv - HIGH dynamic exec @automattic/mcp-wordpress-remote new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec @automattic/mcp-wordpress-remote new Function()
var deprecatedfn = new Function( - HIGH obfuscation context-mode dynamic require()/import()
const TurndownService = require(${n});