Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51197 analyzed
7502 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH dynamic exec awslabs.billing-cost-management-mcp-server __import__()
original_parse_json = __import__( - HIGH dynamic exec awslabs.aws-transform-mcp-server __import__()
else __builtins__.__import__(name, *args, **kwargs) # noqa: A003 - MEDIUM suspicious endpoint awslabs.aws-documentation-mcp-server 169.254.169.254 (cloud metadata)
assert not url_matches_allowlist('http://169.254.169.254/latest/meta-data/', ALLOWLIST) - MEDIUM suspicious endpoint awslabs.aws-documentation-mcp-server 169.254.169.254 (cloud metadata)
302, headers={'location': 'http://169.254.169.254/latest/meta-data/'} - MEDIUM suspicious endpoint awslabs.aws-documentation-mcp-server 169.254.169.254 (cloud metadata)
302, headers={'location': 'http://169.254.169.254/latest/meta-data/'} - HIGH dynamic exec awslabs.aws-healthomics-mcp-server __import__()
__import__( - HIGH obfuscation awslabs.aws-healthomics-mcp-server base64 decode → exec sink
public_token = base64.b64decode(public_auth['authorizationToken']).decode('utf-8') - HIGH dynamic exec nonead/Nonead-Universal-Robots-MCP pickle.loads()
file_records = pickle.loads(zlib.decompress(compressed_data)) - HIGH committed secret Deadweight-Labs/ghosttree Anthropic key
sk-ant…(45 chars, redacted) - HIGH obfuscation adobe-rnd/ew-extensions dynamic require()/import()
cmPromise = import(`${resolveNxOrigin()}${CM_PATH}`).catch((err) => { - MEDIUM suspicious endpoint sk-20231/agentforge 1.1.1.1
assert is_safe_url("https://1.1.1.1/")[0] is True - MEDIUM suspicious endpoint sk-20231/agentforge 8.8.8.8
ok, reason = is_safe_url("http://8.8.8.8/page") - MEDIUM suspicious endpoint sk-20231/agentforge 169.254.169.254 (cloud metadata)
assert is_safe_url("http://169.254.169.254/latest/meta-data/")[0] is False - MEDIUM suspicious endpoint sk-20231/agentforge 169.254.169.254 (cloud metadata)
sink = ["http://169.254.169.254/latest/meta-data/"] - MEDIUM suspicious endpoint sk-20231/agentforge 169.254.169.254 (cloud metadata)
a = _trifecta("ssrf", "http://169.254.169.254/latest/meta-data/")