Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50067 analyzed
8096 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/spreadsheets
'https://www.googleapis.com/auth/spreadsheets', - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/drive
'https://www.googleapis.com/auth/drive', - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/documents
'https://www.googleapis.com/auth/documents', - MEDIUM suspicious endpoint Aiyo28/yzel api.telegram.org
default="https://api.telegram.org", - MEDIUM suspicious endpoint Aiyo28/yzel api.telegram.org
base_url: str = "https://api.telegram.org", - HIGH hidden prompt amurlaniakea/mcp-tool-sanitizer readme: hidden-unicode
"input_schema": {"type": "object", "properties": {"x": {"type": "string", "desc": "ok‹U+202E›hidden"}}}, - MEDIUM over-broad oauth scope alexar76/warden delete_repo
{ name: "delete_repo", description: "Delete a repository.", inputSchema: { type: "object" } }, - MEDIUM over-broad oauth scope alexar76/warden delete_repo
ify_sensitive_tools({ tools: [{ name: \"delete_repo\", description: \"Delete a repository.\", inputSchema: { type: \"object\" } }], patterns: [\"*delete*\"] }).", - HIGH dynamic exec AistyAI/Secure-MCP eval()/exec()
exec(compile(source, "README.md", "exec"), namespace) - MEDIUM suspicious endpoint SubSchoolLTD/agentic-video-studio 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", - HIGH dynamic exec talonicdev/talonic-mcp new Function()
new Function("module", "exports", "require", built.outputFiles[0].text)(mod, mod.exports, require) - MEDIUM over-broad oauth scope KazKozDev/WebOperator https://mail.google.com/
url: 'https://mail.google.com/mail/u/0/#search/newer_than%3A3d', - MEDIUM suspicious endpoint Hotragn/Prompt2MD 169.254.169.254 (cloud metadata)
["cloud metadata URL", () => "http://169.254.169.254/latest/meta-data/"], - MEDIUM suspicious endpoint Hotragn/Prompt2MD 169.254.169.254 (cloud metadata)
["http URL", () => "http://169.254.169.254/latest/meta-data/"], - MEDIUM suspicious endpoint Ev0lv3nta/tinvest-agent api.telegram.org
API = "https://api.telegram.org/bot{token}/{method}"