MCP Observatory
4m ago Tracked 59,455 Last 4m ago 24h 2,452

Code analysis

static source read inferred

Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.

analysis coverage 85% of 59,140 analyzable servers
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source

Running analyzer v33. The scanner changelog explains what each version detects and when it changed.

committed secrets
  1. comisai/comis 62
  2. Vaibhav91one/assay 36
  3. Sertelegger/holdfast 35
  4. Cepeppe/handoff-mcp 31
  5. clidey/whodb 30
dynamic-exec sinks
  1. zilet/cairn 160
  2. abhishekpandaOfficial/XOne 149
  3. talirezun/the-curator 80
  4. TNLegend/PortaMCP 60
  5. mayowa-kalejaiye/Failures 55
suspicious endpoints
  1. nordsym/apiclaw 156
  2. tourhabk-ui/pos 115
  3. CarlxsMG/mcpbridge 90
  4. ergoveritas1-alt/certscore.ai 78
  5. JSONbored/loopover 68
credentials in logs
  1. gosswerner1-max/lazyrelay 8
  2. Hekkova/hekkova-mcp 6
  3. pendpost/pendpost 6
  4. Canonry/canonry 5
  5. KevinRabun/judges 5
over-broad OAuth scopes
  1. khill1269/servalsheets 82
  2. oneKn8/smart-mcps 26
  3. pipeshub-ai/pipeshub-ai 26
  4. lolxl/safespace-mcp 24
  5. BrianArfi/ai-second-brain 23
suspicious bundled scripts
  1. Dicklesworthstone/mcp_agent_mail 11
  2. frankieramirez/ripen 6
  3. horustechltd/horus-flow-mcp 4
  4. itqanlab/agent-toolkit 4
  5. itqanlab/skills 4
ships skill files
  1. Amey-Thakur/AI-SKILLS 200
  2. ArasaniRohithReddy/LearningOS 200
  3. MANVENDRA-github/agentry 200
  4. Sandeeprdy1729/timps-swarm 200
  5. agentic-flow 200
code findings 15 shown
  1. MEDIUM suspicious endpoint 01men/ybkk-AIOS 8.8.8.8 assert.equal(sanitizeCrossOriginNext('http://8.8.8.8/'), '')
    01men-ybkk-AIOS-00c94d7/packages/plugin-console/public/js/ landing.test.mjs :81
  2. MEDIUM suspicious endpoint 01men/ybkk-AIOS 172.32.1.9 assert.equal(sanitizeCrossOriginNext('https://172.32.1.9/'), '')
    01men-ybkk-AIOS-00c94d7/packages/plugin-console/public/js/ landing.test.mjs :80
  3. MEDIUM suspicious endpoint pensados/sentinelx-cloud-core 169.254.169.254 (cloud metadata) "file_url": "https://169.254.169.254/latest/meta-data/",
    pensados-sentinelx-cloud-core-7d33d5e/tests/ test_handlers_upload.py :226
  4. HIGH dynamic exec ttoss/soat new Function() const noMarkdownUris = new Function(
    ttoss-soat-88776e1/packages/website/scripts/ viewerRequest.test.ts :54
  5. MEDIUM over-broad oauth scope ttoss/soat https://www.googleapis.com/auth/cloud-platform scopes: ['https://www.googleapis.com/auth/cloud-platform'],
    ttoss-soat-88776e1/packages/server/tests/unit/tests/rest/ tools.test.ts :1367
  6. MEDIUM suspicious endpoint ttoss/soat 169.254.169.254 (cloud metadata) url: 'http://169.254.169.254/latest/meta-data/',
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ webhookDispatcher.test.ts :468
  7. MEDIUM suspicious endpoint ttoss/soat 169.254.169.254 (cloud metadata) 'http://169.254.169.254/latest/meta-data/placement/availability-zone',
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ vertexAwsCredentials.test.ts :27
  8. MEDIUM suspicious endpoint ttoss/soat 8.8.8.8 url: 'http://8.8.8.8/health',
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ toolEgress.test.ts :256
  9. MEDIUM suspicious endpoint ttoss/soat 169.254.169.254 (cloud metadata) token_uri: 'http://169.254.169.254/token',
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ toolAuth.test.ts :697
  10. MEDIUM over-broad oauth scope ttoss/soat https://www.googleapis.com/auth/cloud-platform scopes: ['https://www.googleapis.com/auth/cloud-platform'],
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ toolAuth.test.ts :311
  11. MEDIUM suspicious endpoint ttoss/soat 169.254.169.254 (cloud metadata) egressGuardedFetch(new URL('http://169.254.169.254/latest/meta-data/'))
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ egressFetch.test.ts :46
  12. MEDIUM suspicious endpoint ttoss/soat 169.254.169.254 (cloud metadata) baseUrl: 'http://169.254.169.254/latest',
    ttoss-soat-88776e1/packages/server/tests/unit/tests/lib/ aiProviderModels.test.ts :996
  13. MEDIUM over-broad oauth scope ttoss/soat https://www.googleapis.com/auth/cloud-platform const GOOGLE_CLOUD_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
    ttoss-soat-88776e1/packages/server/src/lib/ aiProviderModels.ts :31
  14. HIGH dynamic exec no-human-ai/no_human eval()/exec() floored = eval(code, { # noqa: S307 - trusted source, own repo file
    no-human-ai-no_human-36d7bf9/tests/ test_verifiers_gate.py :620
  15. MEDIUM suspicious endpoint no-human-ai/no_human us.i.posthog.com (telemetry) "https://us.i.posthog.com https://us-assets.i.posthog.com; "
    no-human-ai-no_human-36d7bf9/tests/ test_telemetry.py :352