Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec prjct-app/cli new Function()
new Function('module', 'exports', 'require', result.outputFiles[0].text)( - HIGH dynamic exec prjct-app/cli eval()
async eval( - HIGH obfuscation prjct-app/cli dynamic require()/import()
const m = await import(`../../services/settings-installer?t=${Date.now()}`) - HIGH committed secret nguyenthdat/burp-mcp HuggingFace token
hf_AAA…(37 chars, redacted) - HIGH committed secret nguyenthdat/burp-mcp Anthropic key
sk-ant…(108 chars, redacted) - HIGH committed secret nguyenthdat/burp-mcp GitLab token
glpat-…(26 chars, redacted) - HIGH committed secret nguyenthdat/burp-mcp GitHub fine-grained PAT
github…(93 chars, redacted) - HIGH committed secret nguyenthdat/burp-mcp Google API key
AIzaAA…(39 chars, redacted) - MEDIUM suspicious endpoint Telegram-mcp/telegram-mcp t.me
self.assertEqual(self.service._clean_bot_username("https://t.me/test_bot"), "@test_bot") - MEDIUM suspicious endpoint Telegram-mcp/telegram-mcp t.me
mock_invite.link = "https://t.me/+AbCdEfGh1234" - HIGH dynamic exec Telegram-mcp/telegram-mcp eval()/exec()
exec(wrapper, global_ns, local_ns) - HIGH committed secret HariDarshan2321/ninai OpenAI key
sk-thi…(32 chars, redacted) - HIGH dynamic exec intagrin/intagrin eval()/exec()
exec(source, mod.__dict__) - MEDIUM suspicious endpoint skiboy10/agentbase 93.184.216.34
result = validate_url("http://93.184.216.34/") - MEDIUM suspicious endpoint skiboy10/agentbase 169.254.169.254 (cloud metadata)
validate_url("http://169.254.169.254/latest/meta-data/")