Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51314 analyzed
7403 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM suspicious endpoint nawaf1-art/Qantara 8.8.8.8
self.assertFalse(is_safe_url("http://8.8.8.8")) - HIGH committed secret scrothers/pmmcp GitHub token
ghp_01…(40 chars, redacted) - HIGH dynamic exec @llmnesia/mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec badsleepyday/flopeek-core new Function()
return new Function(`${source.slice(start, end)}\nreturn { synchronizeCytoscape, focusRenderedView };`)(); - HIGH committed secret xr843/fojin OpenAI key
sk-kas…(24 chars, redacted) - HIGH dynamic exec igapyon/mikuproject-mcp new Function()
new Function("require", "module", "exports", source)(localRequire, module, module.exports); - HIGH obfuscation igapyon/mikuproject-mcp dynamic require()/import()
const runtimeConfigModule = await import(`file://${join(packageRoot, "dist/runtime/runtimeConfig.js")}`); - HIGH suspicious skill script ZQM-Computing/hermes-agent suspicious bundled script
python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); } - HIGH committed secret ZQM-Computing/hermes-agent Slack token
xoxb-y…(24 chars, redacted) - HIGH committed secret ZQM-Computing/hermes-agent Slack token
xoxb-y…(24 chars, redacted) - HIGH dynamic exec ZQM-Computing/hermes-agent unsafe yaml.load()
return yaml.load(stream, Loader=_get_fast_yaml_loader()) - MEDIUM suspicious endpoint ZQM-Computing/hermes-agent 169.254.169.254 (cloud metadata)
lambda url: url != "http://169.254.169.254/latest/meta-data/", - MEDIUM suspicious endpoint ZQM-Computing/hermes-agent 100.100.100.200 (cloud metadata)
assert is_safe_url("http://100.100.100.200/latest/meta-data/") is False - MEDIUM suspicious endpoint ZQM-Computing/hermes-agent 169.254.169.254 (cloud metadata)
assert is_safe_url("http://169.254.169.254/latest/meta-data/") is False - HIGH dynamic exec ZQM-Computing/hermes-agent eval()/exec()
handler = eval("lambda *a, **k: 'own'", {"__name__": "hermes_plugins.myplug"})