Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50066 analyzed
8097 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- HIGH dynamic exec zb-ss/servonaut __import__()
__import__( - HIGH committed secret zb-ss/servonaut OpenAI key
sk-Lwh…(25 chars, redacted) - MEDIUM suspicious endpoint makeplane/plane-mcp-server 169.254.169.254 (cloud metadata)
url="http://169.254.169.254/latest/meta-data/", - MEDIUM suspicious endpoint getmcpm/cli 169.254.169.254 (cloud metadata)
expect(() => new RegistryClient({ baseUrl: "https://169.254.169.254" })).toThrow( - HIGH committed secret getmcpm/cli Anthropic key
sk-ant…(91 chars, redacted) - HIGH committed secret getmcpm/cli GitLab token
glpat-…(53 chars, redacted) - HIGH committed secret getmcpm/cli GitHub token
ghp_A1…(40 chars, redacted) - HIGH committed secret getmcpm/cli private key
PEM private key block (redacted) - HIGH committed secret getmcpm/cli GitHub token
ghp_A1…(40 chars, redacted) - MEDIUM suspicious endpoint getmcpm/cli 100.128.0.1
expect(() => validateRegistryUrl("https://100.128.0.1")).not.toThrow(); - MEDIUM suspicious endpoint getmcpm/cli 100.63.255.255
expect(() => validateRegistryUrl("https://100.63.255.255")).not.toThrow(); - MEDIUM suspicious endpoint getmcpm/cli 93.184.216.34
expect(() => validateRegistryUrl("https://93.184.216.34")).not.toThrow(); - HIGH hidden prompt getmcpm/cli agent-rules: tag-smuggling
smuggled ascii: "gbsct" - HIGH obfuscation rolecraft-sh/rolecraft dynamic require()/import()
import(${JSON.stringify(spinnerUrl)}).then( - HIGH obfuscation insciqq/AIQSA dynamic require()/import()
const bootstrap = require(${JSON.stringify(bootstrap)});