Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50108 analyzed
8067 re-analysis due
988 not analyzable
0 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187702
- MEDIUM suspicious endpoint Xiaoyu155/Checkpoint 174.138.75.136
DEFAULT_SUB2API_BASE_URL = "http://174.138.75.136:8080/v1" - HIGH dynamic exec huddx01/totalmix-mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec FrankPlusPlus/agent-authz eval()/exec()
exec(compile(_documented_guard_block(path), str(path), "exec"), namespace) - HIGH dynamic exec Jr-kenny/prime-port new Function()
const fn = new Function( - MEDIUM suspicious endpoint Jr-kenny/prime-port api.telegram.org
const r = await fetch(`https://api.telegram.org/bot${TG_TOKEN()}/sendMessage`, { - HIGH obfuscation Mushkrot/Recallant dynamic require()/import()
await import(`${cliUrl}?agent_lifecycle_gate_smoke=${cliImportCounter++}`); - HIGH dynamic exec mstomar698/deltawright new Function()
for (const s of r.selectors) expect(() => new Function('page', 'return ' + s.code)).not.toThrow(); - HIGH obfuscation alexjbarnes/graphene dynamic require()/import()
const { readNode, appendLineVerified, observationId, nodePath } = await import(${JSON.stringify(DIST_STORE_URL)}); - HIGH dynamic exec a-lottes/aSPARK-graph __import__ sink
"PATH": __import__("os").environ["PATH"], "HOME": str(root)}, - MEDIUM suspicious endpoint ArtForests/kylin-sentinel-agent 169.254.169.254 (cloud metadata)
ssrf = self.engine.review_tool_call(PlanStep("disk_usage", {"path": "http://169.254.169.254/latest/meta-data"}, "L1")) - MEDIUM over-broad oauth scope mkpoli/gmail-mcp gmail.modify
"https://www.googleapis.com/auth/gmail.modify https://www.googleapis.com/auth/userinfo.email https://www.googleapis.com/auth/userinfo.profile", - MEDIUM over-broad oauth scope mkpoli/gmail-mcp gmail.modify
const GMAIL_SCOPE = "https://www.googleapis.com/auth/gmail.modify"; - MEDIUM suspicious endpoint lingion/local-policy-agent 169.254.169.254 (cloud metadata)
() => callTool({ name: 'fetch_url', arguments: { url: 'http://169.254.169.254/latest/meta-data' } }), - MEDIUM suspicious endpoint lingion/local-policy-agent 169.254.169.254 (cloud metadata)
fetchWithLocalPrimary('http://169.254.169.254/latest/meta-data', 20000, { - HIGH obfuscation passionworkeer/obsidian-shared-memory-bus dynamic require()/import()
const { createTempDir, cleanupTempDir, createTempJsonl } = await import(pathToFileURL(helpersPath + ".js"));