Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51314 analyzed
7403 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec Stuko0/alice-agent __import__ sink
assert __import__("os").environ["WHATSAPP_REQUIRE_MENTION"] == "true" - MEDIUM suspicious endpoint Stuko0/alice-agent api.telegram.org
return httpx.Request("GET", f"https://api.telegram.org{path}") - HIGH dynamic exec Stuko0/alice-agent __import__ sink
assert __import__("os").environ["TELEGRAM_FREE_RESPONSE_CHATS"] == "-123" - HIGH dynamic exec Stuko0/alice-agent eval()/exec()
exec(code, mod.__dict__) - HIGH dynamic exec Stuko0/alice-agent __import__ sink
assert __import__("os").environ["SSL_CERT_FILE"] == str(cert_file) - MEDIUM suspicious endpoint Stuko0/alice-agent 169.254.169.254 (cloud metadata)
url="http://169.254.169.254/latest/meta-data" - MEDIUM suspicious endpoint Stuko0/alice-agent 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data" - MEDIUM suspicious endpoint Stuko0/alice-agent 169.254.169.254 (cloud metadata)
"https://169.254.169.254/latest/meta-data/", - HIGH committed secret Stuko0/alice-agent Slack token
xoxb-f…(16 chars, redacted) - HIGH committed secret Stuko0/alice-agent Anthropic key
sk-ant…(37 chars, redacted) - HIGH dynamic exec Stuko0/alice-agent eval()/exec()
exec(helper_source, namespace) - HIGH dynamic exec Stuko0/alice-agent __import__ sink
mock_cp = __import__("subprocess").CompletedProcess([], 0, stdout=b"", stderr=b"") - MEDIUM suspicious endpoint Stuko0/alice-agent t.me
"deep_link": "https://t.me/newbot/AliceSetupBot/alice_pair123_bot", - HIGH committed secret Stuko0/alice-agent Slack token
xoxb-w…(21 chars, redacted) - MEDIUM suspicious endpoint Stuko0/alice-agent t.me
assert link == "https://t.me/newbot/TestBot/my_bot"