Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51224 analyzed
7479 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12010
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190157
- HIGH dynamic exec icueth/browser-for-ai new Function()
expect(new Function(`return Buffer.from(${JSON.stringify(urlSafe)}, "base64url").toString();`)()).toBe(plain); - HIGH dynamic exec Abishai95141/FinCon unsafe yaml.load()
return yaml.load(TEMPLATE.read_text(), Loader=Loader) - HIGH dynamic exec collisionengineers/kanmer eval()
return eval(str) || {}; - HIGH dynamic exec collisionengineers/kanmer new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH obfuscation collisionengineers/kanmer dynamic require()/import()
const { createKanmerHttpHost } = await import(${JSON.stringify(httpEntry.href)}); - MEDIUM suspicious endpoint TheStreamCode/discord-management-mcp discord.com
+ `https://discord.com/api/webhooks/12345678901234567/token-value ${process.cwd()}\\.env.local`, - MEDIUM suspicious endpoint TheStreamCode/discord-management-mcp discord.com
webhooks: [{ id: "123", token: "webhook-secret", url: "https://discord.com/api/webhooks/123/secret" }], - MEDIUM over-broad oauth scope google-cloud-support-mcp https://www.googleapis.com/auth/cloud-platform
SCOPES = ("https://www.googleapis.com/auth/cloud-platform",) - HIGH credential in log karthikcsq/google-tools-mcp credential in log
logger.debug('debug keeps its level', { refresh_token: secretValues[2] }); - HIGH dynamic exec karthikcsq/google-tools-mcp new Function()
const tagged = new Function(`return "${secret}";`); - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/drive
SCOPES: ['https://www.googleapis.com/auth/drive'], - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp gmail.modify
'https://www.googleapis.com/auth/gmail.modify', - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/spreadsheets
'https://www.googleapis.com/auth/spreadsheets', - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/drive
'https://www.googleapis.com/auth/drive', - MEDIUM over-broad oauth scope karthikcsq/google-tools-mcp https://www.googleapis.com/auth/documents
'https://www.googleapis.com/auth/documents',