Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51192 analyzed
7507 re-analysis due
995 not analyzable
1 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- MEDIUM over-broad oauth scope peterwang998/pkm-brain https://mail.google.com/
"https://mail.google.com/" - MEDIUM over-broad oauth scope peterwang998/pkm-brain https://mail.google.com/
assert result["results"][0]["gmail_url"].startswith("https://mail.google.com/") - MEDIUM over-broad oauth scope peterwang998/pkm-brain https://mail.google.com/
"https://mail.google.com/mail/u/peter@example.com/#all/abc%2F123" - MEDIUM over-broad oauth scope peterwang998/pkm-brain gmail.modify
"https://www.googleapis.com/auth/gmail.modify" - MEDIUM over-broad oauth scope peterwang998/pkm-brain https://mail.google.com/
"https://mail.google.com/mail/u/" - HIGH dynamic exec DocStream-Oficial/vitals __import__ sink
if __import__("os").name == "nt": - MEDIUM suspicious endpoint DocStream-Oficial/vitals api.telegram.org
url = f"https://api.telegram.org/bot{bot_token}/sendMessage" - HIGH credential in log rexleimo/harness-cli credential in log
console.log(password); - HIGH obfuscation rexleimo/harness-cli dynamic require()/import()
require(`prismjs/components/prism-${id}`); - HIGH dynamic exec Pythoughts-labs/claude-architect new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH committed secret claude-book/mcp-server-google-forms Google OAuth client secret
GOCSPX…(34 chars, redacted) - HIGH dynamic exec AdvancingTitans/agent-engineering-toolkit __import__ sink
real_link = __import__("os").link - HIGH committed secret hfrictor/AgenticRelay OpenAI key
sk-SEC…(28 chars, redacted) - MEDIUM over-broad oauth scope ishaan-skyacres/gmail-multi-mcp gmail.modify
'https://www.googleapis.com/auth/gmail.modify', - HIGH hidden prompt 988hj7tczd-oss/skill-tool skill: skill-exfil
secret→sink: | Add comment | `gh pr comment N --body "..."` | `curl -X POST .../issues/N/comments -d '{"body":"..."}'` |