Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH obfuscation dcierra/DarwinRelay dynamic require()/import()
const { createFederation: freshCreate } = await import(`../lib/federation.mjs?ping=${Date.now()}`); - MEDIUM suspicious endpoint canyonlabz/mcp-perf-suite api.datadoghq.com (telemetry)
DD_API_BASE_URL = os.getenv("DD_API_BASE_URL", "https://api.datadoghq.com") - MEDIUM suspicious endpoint canyonlabz/mcp-perf-suite api.datadoghq.com (telemetry)
DD_API_BASE_URL = os.getenv("DD_API_BASE_URL", "https://api.datadoghq.com") - MEDIUM suspicious endpoint canyonlabz/mcp-perf-suite api.datadoghq.com (telemetry)
DD_API_BASE_URL = os.getenv("DD_API_BASE_URL", "https://api.datadoghq.com") - MEDIUM suspicious endpoint akawolfcito/facilitador-stellar 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", - HIGH dynamic exec ATDev-Inc/uemcp eval()/exec()
exec(compile(code, "<harness>", "exec"), {}) - HIGH dynamic exec iikarus/Dragon-Brain eval()/exec()
exec( # noqa: S102 - HIGH dynamic exec iikarus/Dragon-Brain eval()/exec()
if not eval(assertion): # noqa: S307 — trusted test strings, see DRIFT-001 §5 - HIGH dynamic exec iikarus/Dragon-Brain __import__ sink
env = {**__import__("os").environ, "PYTHONUTF8": "1"} - MEDIUM suspicious endpoint winctl-mcp api.telegram.org
httpx.get("https://api.telegram.org/") - MEDIUM suspicious endpoint winctl-mcp api.telegram.org
TELEGRAM_API = "https://api.telegram.org" - HIGH dynamic exec nihal1294/openapi-to-mcp unsafe yaml.load()
workflow = yaml.load(content, Loader=yaml.BaseLoader) # noqa: S506 - MEDIUM suspicious endpoint tsouth89/toolport-studio discord.com
const webhookUrl = new URL("https://discord.com/api/webhooks/123456/secret-token"); - HIGH dynamic exec tsouth89/toolport-studio new Function()
new Function("window", "document", script)(windowStub, documentStub); - MEDIUM suspicious endpoint tsouth89/toolport-studio us.i.posthog.com (telemetry)
Config.withDefault("https://us.i.posthog.com"),