Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51224 analyzed
7479 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12010
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190157
- HIGH committed secret adhikasp/mcp-reddit committed .env
env file shipped with populated values - HIGH dynamic exec albo3/mcp-server new Function()
const result = new Function(`return ${expression}`)(); - HIGH committed secret tristanlib/mcp_server_mysql_windows committed .env
env file shipped with populated values - HIGH obfuscation williamcloudqi/matlab-mcp-server dynamic require()/import()
require('./src/' + command); - HIGH obfuscation williamcloudqi/matlab-mcp-server dynamic require()/import()
function () { require('node:' + mod); }, // eslint-disable-line no-loop-func - HIGH dynamic exec williamcloudqi/matlab-mcp-server new Function()
var deprecatedfn = new Function('fn', 'log', 'deprecate', 'message', 'site', - MEDIUM suspicious endpoint msfeldstein/mcp-test-servers app.bugsnag.com (telemetry)
"URL must match the pattern https://app.bugsnag.com/{org}/{project}/errors/{error_id}" - HIGH credential in log msfeldstein/mcp-test-servers credential in log
console.error(`✅ Token refreshed: new access token expires in ${ACCESS_TOKEN_EXPIRY_SECONDS}s`); - HIGH committed secret christyjacob4/mcp-server-appwrite private key
PEM private key block (redacted) - HIGH committed secret cremerf/my-mcp-servers Slack token
xoxb-y…(19 chars, redacted) - HIGH obfuscation quegenx/vercel-mcp-server dynamic require()/import()
const group = await import(`./tool-groups/${groupName}/index.js`); - HIGH committed secret threatflux/yaraflux committed .env
env file shipped with populated values - HIGH credential in log filipecalegario/mcp-server-strateegia credential in log
console.log(accessToken); - HIGH committed secret appwrite/mcp private key
PEM private key block (redacted) - HIGH dynamic exec cliffhall/gooseteam new Function()
var deprecatedfn = new Function(