Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM suspicious endpoint codeit-ronit/merchant-agent-checkout 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", - MEDIUM suspicious endpoint acornops/llm-gateway 93.184.216.34
connection_url="https://93.184.216.34/mcp", - MEDIUM suspicious endpoint acornops/llm-gateway 93.184.216.34
assert target.connection_url == "https://93.184.216.34:8443/root" - MEDIUM over-broad oauth scope KyaniteLabs/.github admin:org
parser.add_argument("--ensure-org-ruleset", action="store_true", help="Create an owner-level ruleset when owner is an org and token has admin:org.") - HIGH obfuscation Angelthebestone/Normativa-colombiana-MCP dynamic require()/import()
const P = (await import(`file:///${RAIZ}/src/nucleo/parse.ts`)) as typeof import('../src/nucleo/parse.ts') - HIGH dynamic exec nightious/fontsource-mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH credential in log 8C9D/outlook-mcp credential in log
console.log(`Seeding refresh token (sha256:${fingerprint(refreshToken)}…) into OUTLOOK_KV.`); - MEDIUM suspicious endpoint goweft/heddle 1.1.1.1
"urllib.request.urlopen('http://1.1.1.1', timeout=5); " - MEDIUM suspicious endpoint HaveNiceDa/My-Notion o4509937237950464.ingest.us.sentry.io (telemetry)
const sentryUrl = "https://o4509937237950464.ingest.us.sentry.io/api/4510894903132160/envelope/"; - HIGH dynamic exec maksimka2432fr23/codex-skill-mcp-fallout3 __import__()
__import__(module) - MEDIUM suspicious endpoint okieselbach/AutopilotMonitor 169.254.169.254 (cloud metadata)
expect(isClientIdMetadataUrl('https://169.254.169.254/latest/meta-data')).toBe(false); - MEDIUM suspicious endpoint Gkxie/kintio 169.254.169.254 (cloud metadata)
full_url: 'http://169.254.169.254/latest/meta-data', - MEDIUM suspicious endpoint tashfeenahmed/scallopbot api.telegram.org
const fileUrl = `https://api.telegram.org/file/bot${this.bot.token}/${file.file_path}`; - HIGH suspicious skill script moretea-labs/forge suspicious bundled script
curl -fsSL https://bun.sh/install | bash - HIGH suspicious skill script moretea-labs/forge suspicious bundled script
if has_command curl; then curl -fsSL https://bun.sh/install | bash