Code analysis

static source read inferred

Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.

analysis coverage 86% of 59,713 analyzable servers
51314 analyzed
7403 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source

Running analyzer v33. The scanner changelog explains what each version detects and when it changed.

code findings 15 shown
  1. HIGH dynamic exec rudi193-cmd/willow-2.0 __import__ sink __import__("os").environ.get(
  2. HIGH dynamic exec rudi193-cmd/willow-2.0 __import__ sink CODEX_REPO = __import__("os").environ.get("WILLOW_NEST_ROOT", str(__import__("pathlib").Path.home() / "github" / "willow-nest"))
  3. MEDIUM suspicious endpoint rudi193-cmd/willow-2.0 100.1.1.1 monkeypatch.setenv("RATATOSK_GROVE_TAILNET_URL", "http://100.1.1.1:9")
  4. MEDIUM suspicious endpoint rudi193-cmd/willow-2.0 example.ngrok.app monkeypatch.setenv("RATATOSK_GROVE_NGROK_URL", "https://example.ngrok.app")
  5. HIGH dynamic exec ManojCyberMaster/dronacharya eval()/exec() exec(compile(code, "<matcher>", "exec"), namespace) # noqa: S102 — validated above, sandboxed here
  6. HIGH obfuscation ztrack dynamic require()/import() const module = await import(`./entry.tsx?viz5Scenario=${++scenarioId}`);
  7. HIGH obfuscation ztrack dynamic require()/import() const module = await import(`./entry.tsx?viz4Scenario=${++scenarioId}`);
  8. HIGH dynamic exec bosch-smart-home-camera-mcp eval()/exec() exec( # noqa: S102
    bosch_smart_home_camera_mcp-1.7.3/tests/ test_server_coverage.py :1100
  9. HIGH committed secret gemini-web-mcp-cli Google API key AIzaSy…(39 chars, redacted)
    gemini_web_mcp_cli-0.6.13/src/gemini_web_mcp_cli/core/ constants.py :189
  10. HIGH dynamic exec maml/lightning-fm-mcp new Function() const fn = new Function(
  11. MEDIUM suspicious endpoint kfuras/notipo-app eu.posthog.com (telemetry) ui_host: "https://eu.posthog.com",
  12. MEDIUM suspicious endpoint kfuras/notipo-app eu.i.posthog.com (telemetry) api_host: "https://eu.i.posthog.com",
  13. MEDIUM suspicious endpoint kfuras/notipo-app eu.i.posthog.com (telemetry) host: process.env.POSTHOG_HOST || "https://eu.i.posthog.com",
  14. HIGH credential in log kfuras/notipo-app credential in log console.log(` API key: ${apiKey}`);
  15. HIGH dynamic exec TIMPSs/timps new Function() const fn = new Function('path', `