Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51193 analyzed
7507 re-analysis due
995 not analyzable
0 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH dynamic exec PersonalClaw/PersonalClaw eval()/exec()
tp = eval(tp, vars(_mod)) # noqa: S307 - HIGH committed secret PersonalClaw/PersonalClaw Anthropic key
sk-ant…(55 chars, redacted) - MEDIUM suspicious endpoint PersonalClaw/PersonalClaw 169.254.169.254 (cloud metadata)
"curl http://169.254.169.254/latest/meta-data/", - HIGH committed secret PersonalClaw/PersonalClaw Anthropic key
sk-ant…(61 chars, redacted) - HIGH committed secret PersonalClaw/PersonalClaw OpenAI key
sk-liv…(34 chars, redacted) - HIGH committed secret PersonalClaw/PersonalClaw Anthropic key
sk-ant…(37 chars, redacted) - MEDIUM suspicious endpoint PersonalClaw/PersonalClaw 169.254.169.254 (cloud metadata)
BASELINE_COMMAND = "curl http://169.254.169.254/latest/meta-data/" - HIGH dynamic exec PersonalClaw/PersonalClaw __import__()
spec_semver=__import__( - HIGH dynamic exec PersonalClaw/PersonalClaw __import__()
__import__(f"personalclaw.documents.writers.{module}") - HIGH dynamic exec PersonalClaw/PersonalClaw eval()/exec()
tp = eval(tp, vars(_loader_mod)) # noqa: S307 - MEDIUM suspicious endpoint jztan/pdf-mcp 169.254.169.254 (cloud metadata)
redirect_url = "https://169.254.169.254/latest/meta-data/" - HIGH dynamic exec jztan/pdf-mcp pickle.loads()
clone = pickle.loads(pickle.dumps(_warm_extract_worker)) - HIGH dynamic exec agentpit-io/hunter-community eval()/exec()
exec("BUILTINS = " + m.group(1), ns) - MEDIUM suspicious endpoint agentpit-io/hunter-community 169.254.169.254 (cloud metadata)
headers={"X-Hunter-Upstream": "http://169.254.169.254/latest"}) - MEDIUM suspicious endpoint agentpit-io/hunter-community 136.110.39.14
return os.getenv("KRONOS_URL", "http://136.110.39.14:8000").rstrip("/")