Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH obfuscation aniripsaretro-max/golemreach dynamic require()/import()
await import(`./packages/client/dist/play/main.js?reload=${bust++}`); - MEDIUM suspicious endpoint aniripsaretro-max/golemreach 1.2.3.4
assert.equal(resolveServerBase('http://localhost:8080/', 'http://1.2.3.4:7180/'), 'http://1.2.3.4:7180'); - HIGH committed secret MrWong99/zhi private key
PEM private key block (redacted) - HIGH committed secret falercia/deep-claude Slack token
xoxb-s…(19 chars, redacted) - HIGH dynamic exec marc-shade/enhanced-memory-mcp pickle.loads()
return pickle.loads(decompressed) - HIGH dynamic exec marc-shade/enhanced-memory-mcp eval()/exec()
exec(code_obj, exec_globals) - HIGH dynamic exec marc-shade/enhanced-memory-mcp pickle.loads()
return pickle.loads(decompressed) - HIGH dynamic exec marc-shade/enhanced-memory-mcp pickle.loads()
obj = pickle.loads(decompressed) - HIGH committed secret ogham-mcp/ogham-mcp Anthropic key
sk-ant…(34 chars, redacted) - MEDIUM suspicious endpoint ogham-mcp/ogham-mcp api.telegram.org
TELEGRAM_API = "https://api.telegram.org" - MEDIUM suspicious endpoint personal-whatsapp-mcp x.ngrok.io
PUBLIC_BASE_URL="https://x.ngrok.io") - HIGH credential in log MrZhongzq/apple-icloud-mcp credential in log
log.info('login', { user: 'a@icloud.com', password: 'abcd-efgh' }); - HIGH dynamic exec Nsj94/mcp-playground eval()/exec()
result = eval(expression, {"__builtins__": {}}, allowed) # noqa: S307 - HIGH dynamic exec sergiorbk/petri-net-sim __import__ sink
"PATH": __import__("os").environ["PATH"], - MEDIUM suspicious endpoint Aravindargutus/mcp-gatekeeper 169.254.169.254 (cloud metadata)
default: "http://169.254.169.254/latest/meta-data/",