Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM suspicious endpoint superdesigndev/tools-registry eu.i.posthog.com (telemetry)
monkeypatch.setattr(get_settings(), "posthog_host", "https://eu.i.posthog.com/", raising=False) - MEDIUM suspicious endpoint superdesigndev/tools-registry app.posthog.com (telemetry)
{"provider": "PostHog", "tokens": ["POSTHOG"], "base_url": "https://app.posthog.com", "auth": {"shape": "bearer"}}, - MEDIUM suspicious endpoint superdesigndev/tools-registry api.datadoghq.com (telemetry)
{"provider": "Datadog", "tokens": ["DATADOG"], "base_url": "https://api.datadoghq.com/api/v1", "auth": {"shape": "api_key_header", "header": "DD-API-KEY"}}, - MEDIUM suspicious endpoint superdesigndev/tools-registry sentry.io (telemetry)
{"provider": "Sentry", "tokens": ["SENTRY"], "base_url": "https://sentry.io/api/0", "auth": {"shape": "bearer"}, - MEDIUM suspicious endpoint superdesigndev/tools-registry api.telegram.org
{"provider": "Telegram", "tokens": ["TELEGRAM"], "base_url": "https://api.telegram.org", "auth": {"shape": "query"}}, - MEDIUM suspicious endpoint superdesigndev/tools-registry eu.i.posthog.com (telemetry)
posthog_host: str = "https://eu.i.posthog.com" - MEDIUM suspicious endpoint superdesigndev/tools-registry eu.i.posthog.com (telemetry)
POSTHOG_HOST = "https://eu.i.posthog.com" - MEDIUM suspicious endpoint superdesigndev/tools-registry app.posthog.com (telemetry)
"key": "POSTHOG_KEY", "base_url": "https://app.posthog.com", - HIGH dynamic exec superdesigndev/tools-registry unsafe yaml.load()
spec = yaml.load(raw, Loader=_TolerantLoader) - MEDIUM suspicious endpoint Nislive/llm-agent-mcp-security-lab 169.254.169.254 (cloud metadata)
<code>fetch_web_document("http://169.254.169.254/latest/meta-data/")</code>. - MEDIUM suspicious endpoint Nislive/llm-agent-mcp-security-lab api.telegram.org
f"https://api.telegram.org/bot{token}/sendMessage", - MEDIUM suspicious endpoint Nislive/llm-agent-mcp-security-lab 169.254.169.254 (cloud metadata)
url = m.group(0) if m else "http://169.254.169.254/latest/meta-data/iam/security-credentials/" - HIGH dynamic exec doublebearoliver-cyber/mihomo-ai-failover unsafe yaml.load()
return yaml.load(text, Loader=loader) - MEDIUM suspicious endpoint doublebearoliver-cyber/mihomo-ai-failover 1.1.1.1
"url": "https://1.1.1.1/cdn-cgi/trace", - MEDIUM suspicious endpoint hufirst/onsense 8.8.8.8
assert not pair._valid_base("http://8.8.8.8:8080") # Block external-address injection