Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec zorionarrillaga/oas-execute-mcp eval()/exec()
exec(compile(stub_src, str(pkg_dir / "backends" / "stub.py"), "exec"), stub_mod.__dict__) - HIGH obfuscation ArianeMoura/mcp-dossier dynamic require()/import()
const dist = (m) => import(`file://${join(here, "..", "dist", m)}`); - MEDIUM suspicious endpoint elastic/example-mcp-app-security transfer.sh
const exfilUrl = "https://transfer.sh/uploads"; - HIGH credential in log elastic/example-mcp-app-security credential in log
console.log(` encoded: ${a.apiKey.encoded}`); - MEDIUM suspicious endpoint bstuff/telegram-mcp t.me
return `https://t.me/${entity.username}/${messageId}`; - HIGH obfuscation bstuff/telegram-mcp dynamic require()/import()
await import(${JSON.stringify(ENTRY)}); - HIGH obfuscation stratalib/strata dynamic require()/import()
lib = require('./${assemblyFilename}'); - MEDIUM suspicious endpoint stratalib/strata 34.141.19.43
hub: { url: process.env.STRATA_HUB_URL || 'http://34.141.19.43:8080', apiKey: '' }, - HIGH obfuscation stratalib/strata dynamic require()/import()
const m = require(${JSON.stringify(mutantPath)}); - HIGH credential in log stratalib/strata credential in log
console.log(` Client Secret: ${intent.client_secret}`); - HIGH obfuscation stratalib/strata dynamic require()/import()
require('./strata/${recall.filename}') - MEDIUM suspicious endpoint blightbow/parkour-mcp 8.8.8.8
assert check_url_ssrf("http://8.8.8.8/") is None - MEDIUM suspicious endpoint blightbow/parkour-mcp 169.254.169.254 (cloud metadata)
result = check_url_ssrf("http://169.254.169.254/latest/meta-data/") - HIGH dynamic exec jpreyestCL/secondbrain eval()/exec()
exec(compile(cuerpo, str(RUTA), "exec"), mod.__dict__) - HIGH committed secret chat-mother-forker private key
PEM private key block (redacted)