Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH committed secret TheGaySupreme123/yoetz OpenAI key
sk-pro…(29 chars, redacted) - HIGH dynamic exec TheGaySupreme123/yoetz __import__()
real_assert = __import__( - HIGH dynamic exec TheGaySupreme123/yoetz eval()/exec()
exec(script, {}) - HIGH dynamic exec TheGaySupreme123/yoetz eval()/exec()
exec(compile(tree, str(path), "exec"), module.__dict__) - HIGH dynamic exec TheGaySupreme123/yoetz __import__()
__import__( - HIGH committed secret TheGaySupreme123/yoetz OpenAI key
sk-pro…(29 chars, redacted) - MEDIUM suspicious endpoint yatuk/mcpradar 169.254.169.254 (cloud metadata)
f = _scan("url = 'http://169.254.169.254/latest/meta-data/'\n", tmp_path) - MEDIUM suspicious endpoint yatuk/mcpradar 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", - MEDIUM suspicious endpoint yatuk/mcpradar 169.254.169.254 (cloud metadata)
json={"authorization_servers": ["http://169.254.169.254/latest"]}, - MEDIUM suspicious endpoint yatuk/mcpradar 169.254.169.254 (cloud metadata)
"fetch('http://169.254.169.254/latest');", - MEDIUM suspicious endpoint healthleader/cli 169.254.169.254 (cloud metadata)
assert.throws(() => safeWebhookUrl("https://169.254.169.254/latest/meta-data"), /private\/loopback/); - MEDIUM suspicious endpoint healthleader/cli us.i.posthog.com (telemetry)
const POSTHOG_HOST = "https://us.i.posthog.com"; - HIGH dynamic exec phillipclapham/anneal-memory pickle.loads()
restored = pickle.loads(pickle.dumps(err)) - HIGH bundled IDE extension AndrewAvery7/promptspend untrusted-exec (medium)
runs its entry point in untrusted workspaces (untrustedWorkspaces.supported) - MEDIUM suspicious endpoint fouradata/mcp 1.2.3.4
ignoreProxies: ["http://1.2.3.4:8080", "socks5://5.6.7.8:1080"],