Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51192 analyzed
7507 re-analysis due
995 not analyzable
1 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH dynamic exec LeonTing1010/tap new Function()
const factory = new Function('document', 'FocusEvent', `return (${resolverSrc})`) - HIGH dynamic exec LeonTing1010/tap new Function()
new Function('window', `(${src})()`)(fakeWindow) - HIGH dynamic exec LeonTing1010/tap new Function()
const axPickNodes = new Function(`${rolesSrc}; ${fnSrc}; return axPickNodes`)() - HIGH dynamic exec LeonTing1010/tap new Function()
return new Function('chrome', `${fnSrc}; return queryAttachCandidate`) - HIGH dynamic exec LeonTing1010/tap new Function()
const ambientHostOf = new Function(`return ${extractFn('ambientHostOf')}`)() - HIGH dynamic exec LeonTing1010/tap indirect eval
try { return { __ok: true, value: await (0, eval)(expr) } } - MEDIUM suspicious endpoint Mrshahidali420/google-search-console-mcp 169.254.169.254 (cloud metadata)
result = sitemaps.fetch_urls("http://169.254.169.254/sitemap.xml", _NeverCalled()) - MEDIUM suspicious endpoint nawaf1-art/Qantara 169.254.169.254 (cloud metadata)
self.assertFalse(is_safe_url("http://169.254.169.254")) - MEDIUM suspicious endpoint nawaf1-art/Qantara 8.8.8.8
self.assertFalse(is_safe_url("http://8.8.8.8")) - HIGH committed secret scrothers/pmmcp GitHub token
ghp_01…(40 chars, redacted) - HIGH dynamic exec @llmnesia/mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec badsleepyday/flopeek-core new Function()
return new Function(`${source.slice(start, end)}\nreturn { synchronizeCytoscape, focusRenderedView };`)(); - HIGH committed secret xr843/fojin OpenAI key
sk-kas…(24 chars, redacted) - HIGH dynamic exec igapyon/mikuproject-mcp new Function()
new Function("require", "module", "exports", source)(localRequire, module, module.exports); - HIGH obfuscation igapyon/mikuproject-mcp dynamic require()/import()
const runtimeConfigModule = await import(`file://${join(packageRoot, "dist/runtime/runtimeConfig.js")}`);