Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51314 analyzed
7403 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM suspicious endpoint leone-develop/api-key-case us.i.posthog.com (telemetry)
"https://us.i.posthog.com", - HIGH dynamic exec leone-develop/api-key-case vm exec
vm.runInNewContext(script, {window: isolatedWindow, document: fakeDocument, URL, Uint8Array, AbortController, setTimeout, clearTimeout}); - MEDIUM suspicious endpoint leone-develop/api-key-case us.i.posthog.com (telemetry)
apiHost: "https://us.i.posthog.com", - MEDIUM suspicious endpoint leone-develop/api-key-case eu.i.posthog.com (telemetry)
eu: "https://eu.i.posthog.com" - MEDIUM suspicious endpoint leone-develop/api-key-case us.i.posthog.com (telemetry)
us: "https://us.i.posthog.com", - MEDIUM suspicious endpoint leone-develop/api-key-case eu.i.posthog.com (telemetry)
"https://eu.i.posthog.com" - MEDIUM suspicious endpoint leone-develop/api-key-case us.i.posthog.com (telemetry)
const DEFAULT_POSTHOG_API_HOST = "https://us.i.posthog.com"; - MEDIUM suspicious endpoint dotneteeer/SimpleTgChatMcp api.telegram.org
return `https://api.telegram.org/bot${token}/${method}`; - MEDIUM suspicious endpoint dotneteeer/SimpleTgChatMcp api.telegram.org
<code>https://api.telegram.org/bot<TOKEN>/getUpdates</code> in a browser and read{" "} - MEDIUM suspicious endpoint dotneteeer/SimpleTgChatMcp t.me
<a href="https://t.me/BotFather" target="_blank" rel="noreferrer"> - HIGH dynamic exec applemusic-mcp __import__ sink
@pytest.mark.skipif(__import__("os").name == "nt", reason="POSIX file modes only") - HIGH committed secret applemusic-mcp private key
PEM private key block (redacted) - MEDIUM suspicious endpoint alexjbarnes/cockpit api.telegram.org
const url = `https://api.telegram.org/bot${config.botToken}/sendMessage`; - HIGH dynamic exec ariaxhan/agentmailkit __import__()
__import__(f"{__package__}.{mod}") - HIGH obfuscation superfly/sprites-opencode-plugin dynamic require()/import()
const { default: plugin } = await import(`${NAME}/server`);