Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec igorzheludkov/execbro new Function()
return (await new Function(`return (${expr});`)()) as Record<string, unknown>; - HIGH dynamic exec igorzheludkov/execbro eval()
return eval(expr) as { - HIGH dynamic exec igorzheludkov/execbro new Function()
expect(() => new Function("return " + src.replace(/^\(function/, "(function"))).not.toThrow(); - HIGH dynamic exec igorzheludkov/execbro new Function()
const run = new Function("globalThis", source + "; return (" + expr + ");"); - MEDIUM suspicious endpoint hassancs91/brainoutside www.google-analytics.com (telemetry)
"img-src": "https://www.google-analytics.com https://www.googletagmanager.com", - HIGH dynamic exec 31Benzi/IDA-PRO-MCP eval()/exec()
exec(code, {"__builtins__": __builtins__}, local_vars) - MEDIUM suspicious endpoint nihalashetty/Forge 8.8.8.8
assert await validate_url("https://8.8.8.8/x", _BLOCK) == "https://8.8.8.8/x" - MEDIUM suspicious endpoint nihalashetty/Forge 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", # cloud metadata - MEDIUM suspicious endpoint nihalashetty/Forge 8.8.8.8
cfg["request"]["url_template"] = "https://8.8.8.8/go" # public literal so the first hop passes - MEDIUM suspicious endpoint nihalashetty/Forge 169.254.169.254 (cloud metadata)
client = _redirecting_client("http://169.254.169.254/latest/meta-data/") - HIGH dynamic exec nihalashetty/Forge eval()/exec()
exec(byte_code, ns) # noqa: S102 - sandboxed by RestrictedPython - HIGH dynamic exec nihalashetty/Forge __import__()
return __import__(name, *args, **kwargs) - HIGH dynamic exec nihalashetty/Forge eval()/exec()
return eval(code, env, {}) # noqa: S307 - sandboxed by RestrictedPython - HIGH obfuscation liuboacean/agent-comm-hub dynamic require()/import()
const mod = await import(`${DB_TS}?qa-undef=${Date.now()}`); - HIGH obfuscation liuboacean/agent-comm-hub dynamic require()/import()
const mod = await import(`${DB_TS}?a=${Date.now()}`);