Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH dynamic exec PrefectHQ/fastmcp eval()/exec()
exec(compile(example.source, str(example.path), "exec"), namespace) - HIGH dynamic exec PrefectHQ/fastmcp eval()/exec()
exec(compile(matches[0].source, str(path), "exec"), namespace) - HIGH dynamic exec PrefectHQ/fastmcp __import__()
__import__(alias.name) - HIGH dynamic exec PrefectHQ/fastmcp unsafe yaml.load()
parsed = yaml.load(frontmatter_text, Loader=yaml.BaseLoader) - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAZZ…(20 chars, redacted) - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAIO…(20 chars, redacted) - HIGH dynamic exec cpaumelle/docplane __import__ sink
@pytest.mark.skipif(not __import__("os").environ.get("DB_HOST"), reason="requires a PostgreSQL database") - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAIO…(20 chars, redacted) - MEDIUM suspicious endpoint harness/mcp-server 2.3.4.5
{ cluster: "prod", url: "https://2.3.4.5" }, - MEDIUM suspicious endpoint harness/mcp-server 1.2.3.4
{ cluster: "staging", url: "https://1.2.3.4" }, - MEDIUM suspicious endpoint harness/mcp-server 1.2.3.4
" {list:{elements:[{cluster:'staging', url:'https://1.2.3.4'}, {cluster:'prod', url:'https://2.3.4.5'}]}}\n" + - MEDIUM suspicious endpoint harness/mcp-server docs.datadoghq.com (telemetry)
te/region identifier. Valid values (per https://docs.datadoghq.com/getting_started/site/): \"datadoghq.com\" (US1), \"us3.datadoghq.com\" (US3), \"us5.datadoghq.com\" (US5), \"datadoghq.eu\" (EU1), \" - MEDIUM suspicious endpoint harness/mcp-server docs.datadoghq.com (telemetry)
datadoghq.eu", "ap1.datadoghq.com"; see https://docs.datadoghq.com/getting_started/site/), datadogCredentialsSecretName (REQUIRED on Kubernetes — name of k8s secret containing "dd-api-key" and "dd-app - HIGH hidden prompt agentskillexchange/skills skill: skill-exfil
secret→sink: - **API key:** set `ZINC_API_KEY` from [app.zinc.com](https://app.zinc.com) and send `Authorization: Bearer $ZINC_API_KEY` to `/orders` and related endpoints. This is the standard flow fo - HIGH hidden prompt agentskillexchange/skills skill: skill-exfil
secret→sink: - npx add-mcp https://mcp.neon.tech/mcp --header "Authorization: Bearer <$NEON_API_KEY>"