Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50100 analyzed
8073 re-analysis due
988 not analyzable
2 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187701
- MEDIUM suspicious endpoint philpof102-svg/lawbor 169.254.169.254 (cloud metadata)
const r = await post(urlA, '/peers', { addr: '0x' + 'dd'.repeat(20), url: 'http://169.254.169.254' }); - HIGH dynamic exec philpof102-svg/lawbor new Function()
new Function('document', 'd', esc + '\n' + expr)(document, { readyFrontier: ready }); - MEDIUM suspicious endpoint philpof102-svg/lawbor 169.254.169.254 (cloud metadata)
'https://169.254.169.254/', 'https://10.0.0.5/', 'https://172.16.3.4/', 'https://192.168.1.1/', - HIGH committed secret phenicea/agentdata Google API key
AIzaSy…(39 chars, redacted) - HIGH obfuscation phaedo-labs/phaedo-mcp base64 decode → exec sink
if (typeof globalThis.atob === 'undefined') globalThis.atob = (s) => Buffer.from(s, 'base64').toString('binary'); - HIGH dynamic exec phaedo-labs/phaedo-mcp new Function()
const evalScript = (p) => new Function(readFileSync(resolve(ROOT, p), 'utf8')).call(globalThis); - MEDIUM suspicious endpoint pelletfi/pellet t.me
{ href: "https://t.me/pelletnetwork", label: "Telegram", Icon: TelegramIcon }, - MEDIUM suspicious endpoint pelletfi/pellet t.me
href: "https://t.me/pelletnetwork", - HIGH committed secret pdwi2020/mcp-server-colab-exec Google OAuth client secret
GOCSPX…(35 chars, redacted) - MEDIUM suspicious endpoint payclaw/mcp-server 169.254.169.254 (cloud metadata)
const result = await webFetch("https://169.254.169.254"); - MEDIUM suspicious endpoint payclaw/badge-server 169.254.169.254 (cloud metadata)
expect(isPublicOrigin("https://169.254.169.254")).toBe(false); - MEDIUM suspicious endpoint payclaw/badge-server 172.32.0.1
expect(isPublicOrigin("https://172.32.0.1")).toBe(true); - MEDIUM suspicious endpoint payclaw/badge-server 172.15.0.1
expect(isPublicOrigin("https://172.15.0.1")).toBe(true); - MEDIUM suspicious endpoint payclaw/badge-server 169.254.169.254 (cloud metadata)
const result = await webFetch("https://169.254.169.254"); - HIGH committed secret pavelpiha/specrun committed .env
env file shipped with populated values