Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50877 analyzed
7738 re-analysis due
994 not analyzable
1 not yet analyzed
4843 source gone
not analyzable
793 too large 201 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6279
- dynamic exec 11963
- obfuscation 3642
- suspicious endpoint 12517
- credential in log 718
- over-broad oauth scope 2539
- suspicious skill script 197
- bundled IDE extension 50
- skill file 189917
- HIGH dynamic exec severment/cleya new Function()
expect(() => new Function(shellScript(html))).not.toThrow(); - HIGH dynamic exec severment/cleya new Function()
expect(() => new Function(runtime!)).not.toThrow(); - HIGH dynamic exec FradSer/mcp-server-mas-sequential-thinking __import__()
__import__(package_name) - HIGH dynamic exec Zn070515/office-kit __import__()
return __import__(name, *a, **k) - MEDIUM over-broad oauth scope sunnylabtv-crypto/ai_mcp_multi_agent-public gmail.modify
'https://www.googleapis.com/auth/gmail.modify', - HIGH dynamic exec sunnylabtv-crypto/ai_mcp_multi_agent_oosdk-public eval()/exec()
return bool(eval(safe, {"__builtins__": {}}, wrapped)) # noqa: S307 - MEDIUM over-broad oauth scope sunnylabtv-crypto/ai_mcp_multi_agent_oosdk-public gmail.modify
'https://www.googleapis.com/auth/gmail.modify', - MEDIUM suspicious endpoint @msfeldstein/mcp-test-servers app.bugsnag.com (telemetry)
"URL must match the pattern https://app.bugsnag.com/{org}/{project}/errors/{error_id}" - HIGH credential in log @msfeldstein/mcp-test-servers credential in log
console.error(`✅ Token refreshed: new access token expires in ${ACCESS_TOKEN_EXPIRY_SECONDS}s`); - MEDIUM suspicious endpoint jshsakura/oc-piloci api.telegram.org
request=httpx.Request("POST", "https://api.telegram.org"), - HIGH dynamic exec jshsakura/oc-piloci __import__()
__import__( - MEDIUM suspicious endpoint jshsakura/oc-piloci api.telegram.org
url = f"https://api.telegram.org/bot{settings.telegram_bot_token}/{method}" - MEDIUM suspicious endpoint jshsakura/oc-piloci api.telegram.org
url = f"https://api.telegram.org/bot{settings.telegram_bot_token}/sendMessage" - HIGH dynamic exec Saurabh0003M/ARADHYA __import__()
__import__(package.replace("-", "_")) - MEDIUM suspicious endpoint Saurabh0003M/ARADHYA api.telegram.org
self.base_url = f"https://api.telegram.org/bot{token}"