Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50064 analyzed
8099 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- HIGH dynamic exec matematicsolutions/patron new Function()
const fabryka = new Function(`${rdzen}\nreturn { kanonicznySha256, zweryfikuj };`); - MEDIUM suspicious endpoint GoldenLoaf24h/browserclaw 169.254.169.254 (cloud metadata)
expect(() => assertSafeUrl('http://169.254.169.254/latest/meta-data')).toThrow(/forbidden/); - HIGH dynamic exec GoldenLoaf24h/browserclaw new Function()
return !!new Function('return 1')(); - HIGH dynamic exec GoldenLoaf24h/browserclaw new Function()
func: (code) => new Function(code)(), - HIGH obfuscation n0mad-ai/bastra-recall dynamic require()/import()
const { createRenderer } = await import(`${REPO}/renderer.js`); - MEDIUM suspicious endpoint ivanostanin/lucius-mcp 8.8.8.8
assert service._validate_attachment_url("https://8.8.8.8/evidence.txt") == "https://8.8.8.8/evidence.txt" - HIGH dynamic exec ivanostanin/lucius-mcp __import__()
module = __import__(f"src.tools.{module_path.stem}", fromlist=["*"]) - HIGH dynamic exec MikeyPetrillo/Agent402 vm exec
return vm.runInNewContext("re.test(s)", { re, s: sub }, { timeout: USER_REGEX_TIMEOUT_MS }); - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 us.i.posthog.com (telemetry)
const PH_INGEST_HOST = "https://us.i.posthog.com"; - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 us-assets.i.posthog.com (telemetry)
const PH_ASSETS_HOST = "https://us-assets.i.posthog.com"; - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 us.i.posthog.com (telemetry)
const HOST = process.env.POSTHOG_HOST || "https://us.i.posthog.com"; - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 us.posthog.com (telemetry)
ui_host: "https://us.posthog.com", - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 169.254.169.254 (cloud metadata)
await throws(h("feed-parse")({ url: "http://169.254.169.254/latest/meta-data" }), 400, "feed-parse: metadata IP rejected"); - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 93.184.216.34
const URL_OK = "https://93.184.216.34/"; - MEDIUM suspicious endpoint MikeyPetrillo/Agent402 93.184.216.34
process.env.YAHOO_RELAY_URL = "https://93.184.216.34/relay"; // public-IP literal → no DNS