Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51197 analyzed
7502 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- MEDIUM suspicious endpoint PhantomPixelDev/BetterWebSearch-MCP 169.254.169.254 (cloud metadata)
fetchPage("http://169.254.169.254/latest/meta-data/"), - HIGH dynamic exec tuxr/bible-mcp vm exec
vm.runInNewContext(BIBLE_READER_INLINE_UTILS, ctx); - HIGH dynamic exec tuxr/bible-mcp vm exec
vm.runInNewContext(BIBLE_READER_INLINE_UTILS, context); - HIGH dynamic exec Cr-GH0/chaoxing-agent __import__()
locals()[package] = __import__(package) - HIGH dynamic exec Cr-GH0/chaoxing-agent __import__()
__import__(dependency) - HIGH dynamic exec aikadimsoy/kasa-mcp eval()/exec()
self.assertDictEqual(eval(event[3]), content_dict) - HIGH dynamic exec aikadimsoy/kasa-mcp eval()/exec()
self.assertDictEqual(eval(event[3]), content_dict) - HIGH dynamic exec SemClone/mcp-semclone __import__()
__import__(pkg) - HIGH dynamic exec ai-browser-toolkit __import__()
errors += (__import__(module, fromlist=["x"]),) - HIGH committed secret greglas75/codesift OpenAI key
sk-pro…(32 chars, redacted) - HIGH dynamic exec darki73/sylvan eval()/exec()
exec( # noqa: S102 - HIGH committed secret badoll/cellarer Anthropic key
sk-ant…(35 chars, redacted) - HIGH obfuscation badoll/cellarer dynamic require()/import()
import(${JSON.stringify(pathToFileURL(join(installedPackageRoot, "dist", "commands", "command-catalog.js")).href)}), - HIGH obfuscation yuunnn/co-agent dynamic require()/import()
const { prepareEvidencePacket, readSealedEvidence } = await import(`../src/core/evidence.mjs?test=${Date.now()}`); - MEDIUM suspicious endpoint ukbodypilot/radio-gateway api.telegram.org
url = f'https://api.telegram.org/bot{token}/{method}'