Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH committed secret kiwagu/zero-memory Anthropic key
sk-ant…(33 chars, redacted) - HIGH committed secret kiwagu/zero-memory GitHub fine-grained PAT
github…(44 chars, redacted) - HIGH committed secret kiwagu/zero-memory GitHub token
ghp_AA…(40 chars, redacted) - MEDIUM suspicious endpoint kiwagu/zero-memory 169.254.169.254 (cloud metadata)
guarded('http://169.254.169.254/latest/meta-data/') - MEDIUM suspicious endpoint kiwagu/zero-memory 93.184.216.34
expect(calledUrl).toBe('http://93.184.216.34:11434/api/generate'); - HIGH dynamic exec zeus-dev-helper-mcp __import__()
module = __import__(path, fromlist=[name]) - HIGH dynamic exec lodsb/prax __import__ sink
env={**__import__("os").environ, "PYTHONPATH": "src"}, - HIGH dynamic exec lodsb/prax __import__ sink
**__import__("os").environ, - HIGH dynamic exec lodsb/prax __import__()
__import__(name) - HIGH dynamic exec WillEhrendreich/SageFs vm exec
vm.runInNewContext(harness, context); - HIGH dynamic exec michelgrolet/people-memory-mcp new Function()
export const { esc, mdInline, mdRenderInline, mdRender } = new Function(source)(); - MEDIUM suspicious endpoint dsnbyte/telesend api.telegram.org
const output = redactSecrets(`failed ${token} https://api.telegram.org/bot${token}/sendMessage`); - MEDIUM suspicious endpoint dsnbyte/telesend api.telegram.org
private readonly baseUrl = "https://api.telegram.org", - MEDIUM suspicious endpoint aureliocpr-ctrl/verimem 169.254.169.254 (cloud metadata)
_read_image_to_b64_and_media_type("http://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint aureliocpr-ctrl/verimem 169.254.169.254 (cloud metadata)
headers={"location": "http://169.254.169.254/latest/meta-data/",