Code analysis

static source read inferred

Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.

analysis coverage 85% of 59,151 analyzable servers
50064 analyzed
8099 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source

Running analyzer v33. The scanner changelog explains what each version detects and when it changed.

code findings 15 shown
  1. HIGH committed secret kontourai/station Stripe live key sk_liv…(36 chars, redacted)
  2. HIGH obfuscation kontourai/station dynamic require()/import() const { ChatTurnDedupStore } = await import(${JSON.stringify(moduleUrl)});
  3. HIGH obfuscation kontourai/station dynamic require()/import() const { createIsolatedTaskSearch, sessionReadAuthorityFromRequest } = await import(pathToFileURL(${JSON.stringify(taskReaderProbe)}));
  4. HIGH obfuscation kontourai/station dynamic require()/import() const mod = await import(\`\${process.env.GITHUB_WORKSPACE}/${module}\`);
  5. HIGH dynamic exec kontourai/station vm exec const run = vm.compileFunction(
  6. HIGH committed secret kontourai/station GitHub token ghp_01…(40 chars, redacted)
  7. HIGH obfuscation kontourai/station dynamic require()/import() const { inspectStationHomeRecovery } = await import(${JSON.stringify(new URL('../station-home-recovery-preflight.ts', import.meta.url).href)});
  8. HIGH obfuscation kontourai/station dynamic require()/import() const { runCli } = await import(${JSON.stringify(new URL('../../../cli/src/cli.ts', import.meta.url).href)});
  9. HIGH committed secret kontourai/station private key PEM private key block (redacted)
  10. HIGH committed secret kontourai/station Stripe live key sk_liv…(36 chars, redacted)
  11. HIGH obfuscation tterrasson/extrait dynamic require()/import() await import(`./${exampleName}.ts`);
  12. MEDIUM suspicious endpoint weather-mcp/weather-mcp 169.254.169.254 (cloud metadata) linkLocal: 'https://169.254.169.254/cap_public_website/x',
  13. MEDIUM suspicious endpoint weather-mcp/weather-mcp 169.254.169.254 (cloud metadata) expect(isAllowedFeedUrl('https://169.254.169.254/output/gfa/x.cap', feed)).toBe(false);
  14. HIGH dynamic exec vinkius-labs/mcpfusion eval() return eval('typeof process');
  15. HIGH dynamic exec vinkius-labs/mcpfusion new Function() const fn = new Function('return typeof process !== "undefined" ? process.env : "blocked"');