Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51311 analyzed
7406 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec sergei-roska/agent-forge eval()
$result = eval(base64_decode('${base64Payload}')); - HIGH dynamic exec sergei-roska/agent-forge eval()
$result = eval(base64_decode('${base64Payload}')); - MEDIUM suspicious endpoint kingiol/Mido 169.254.169.254 (cloud metadata)
await expect(fetchUrl?.execute?.({ url: 'http://169.254.169.254/' })).rejects.toThrow('private-network URL'); - HIGH dynamic exec futureOarming/mastergo-codex new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH committed secret difflore/difflore-cli GitHub fine-grained PAT
github…(40 chars, redacted) - HIGH dynamic exec enihcam/opencode-webmcp eval()
const result = await targetPage.evaluate((c) => eval(c), code); - HIGH dynamic exec Santhosh-Stalin/Synapse __import__()
__import__(module) - HIGH dynamic exec grantrb95/freight-ops __import__()
__import__(package) - MEDIUM suspicious endpoint Idanref/memotrust mixpanel.com (telemetry)
'https://mixpanel.com/api/query/segmentation?' + params.toString(), - MEDIUM suspicious endpoint dfrho/github-saas-lead-intelligence segment.com (telemetry)
{"name": "Segment", "url": "https://segment.com", "pitch": "Customer data platform that collects, cleans, and routes event data to 300+ destinations"}, - MEDIUM suspicious endpoint dfrho/github-saas-lead-intelligence amplitude.com (telemetry)
{"name": "Amplitude", "url": "https://amplitude.com", "pitch": "Digital analytics platform with behavioral graphs, predictive cohorts, and experimentation"}, - MEDIUM suspicious endpoint dfrho/github-saas-lead-intelligence posthog.com (telemetry)
{"name": "PostHog", "url": "https://posthog.com", "pitch": "Open-source product analytics with feature flags, session recording, and A/B testing"}, - MEDIUM suspicious endpoint dfrho/github-saas-lead-intelligence mixpanel.com (telemetry)
{"name": "Mixpanel", "url": "https://mixpanel.com", "pitch": "Product analytics with funnel analysis, cohorts, and real-time event tracking for growth teams"}, - MEDIUM suspicious endpoint dfrho/github-saas-lead-intelligence datadoghq.com (telemetry)
{"name": "Datadog", "url": "https://datadoghq.com", "pitch": "Full-stack observability with APM, logs, metrics, and distributed tracing in one platform"}, - HIGH suspicious skill script hegemonart/get-design-done suspicious bundled script
{ name: 'exec-python-c', regex: /\bpython[23]?\s+-c\s+["']import\s+os[^"']*os\.(system|popen|exec)\b/i, description: 'python -c inline os.system shell-out', severity: 'high' },