Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51224 analyzed
7479 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12010
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190157
- MEDIUM suspicious endpoint makerchecker/MakerChecker 172.32.0.1
expect(assertSafeHttpUrl("http://172.32.0.1/x")).toBe("http://172.32.0.1/x"); // just outside /12 - MEDIUM suspicious endpoint makerchecker/MakerChecker 8.8.8.8
expect(assertSafeHttpUrl("http://8.8.8.8/x")).toBe("http://8.8.8.8/x"); - MEDIUM suspicious endpoint makerchecker/MakerChecker 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", // cloud metadata - HIGH credential in log makerchecker/MakerChecker credential in log
console.log(apiKey.plaintext); - HIGH committed secret makerchecker/MakerChecker private key
PEM private key block (redacted) - HIGH dynamic exec jakerusso100-ai/Anvil eval()/exec()
return str(eval(expression, {"__builtins__": {}}, {})) - HIGH dynamic exec jakerusso100-ai/Anvil __import__ sink
key = __import__("os").environ.get(prov["api_key_env"]) - HIGH committed secret necorox-com/kotoji committed .env
env file shipped with populated values - HIGH committed secret necorox-com/kotoji Google OAuth client secret
GOCSPX…(33 chars, redacted) - MEDIUM suspicious endpoint xAmirHamza77/AntiStrike7.0 169.254.169.254 (cloud metadata)
{"payload": "http://169.254.169.254/latest/meta-data/", "type": "cloud", "target": "aws_metadata"}, - HIGH dynamic exec rikhinkavuru/calma eval()/exec()
exec(compile(code, "<formula>", "exec"), ns) # noqa: S102 - AST-guarded + sandboxed ns; validated; prod=in-VM - HIGH dynamic exec rikhinkavuru/calma eval()/exec()
exec(code, ns) # noqa: S102 — the repo's own code, run in the sandbox; the transform only appends a decorator - HIGH committed secret attebury/remogram GitHub token
ghs_ey…(40 chars, redacted) - HIGH obfuscation mkarvan/AgentShield base64 decode → exec sink
exec(base64.b64decode(b"cHJpbnQoJ2hlbGxvIGZyb20gbWFsaWNpb3VzIHBheWxvYWQnKQ==")) - HIGH dynamic exec mkarvan/AgentShield eval()/exec()
exec(base64.b64decode(b"cHJpbnQoJ2hlbGxvIGZyb20gbWFsaWNpb3VzIHBheWxvYWQnKQ=="))