Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50066 analyzed
8097 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- HIGH dynamic exec JaggerYu-ArchAI/archai-revitmcp-dynamo pickle.loads()
return pickle.loads(bb) - HIGH dynamic exec JaggerYu-ArchAI/archai-revitmcp-dynamo pickle.loads()
return pickle.loads(bb) - HIGH dynamic exec JaggerYu-ArchAI/archai-revitmcp-dynamo pickle.loads()
retval = pickle.loads(pickled_response) - HIGH dynamic exec JaggerYu-ArchAI/archai-revitmcp-dynamo pickle.loads()
res = pickle.loads(res) - HIGH committed secret JaggerYu-ArchAI/archai-revitmcp-dynamo OpenAI key
sk-877…(35 chars, redacted) - HIGH dynamic exec Arun-kc/schemabrain pickle.loads()
restored = pickle.loads(pickle.dumps(exc)) - HIGH dynamic exec Arun-kc/schemabrain pickle.loads()
revived: UnknownGroupByColumnError = pickle.loads(pickle.dumps(err)) - HIGH dynamic exec Arun-kc/schemabrain pickle.loads()
roundtripped = pickle.loads(data) - HIGH dynamic exec Arun-kc/schemabrain pickle.loads()
revived = pickle.loads(pickle.dumps(finding)) - HIGH dynamic exec Arun-kc/schemabrain pickle.loads()
revived: MalformedMetricRowError = pickle.loads(pickle.dumps(err)) - HIGH dynamic exec Pratiikpy/agent-arena eval()/exec()
exec(compile(code, "<nl-strategy>", "exec"), g, loc) # noqa: S102 - allowlisted + restricted ns - MEDIUM suspicious endpoint CSOAI-ORG/sovereign-temple 50.217.254.165
API_GW = "http://50.217.254.165:41422" # Archive port 6006 → external 41422 - MEDIUM suspicious endpoint CSOAI-ORG/sovereign-temple 50.217.254.165
GPU_FORGE = "http://50.217.254.165:40408" # RTX 8000 #1 — JARVIS/SOV3 - MEDIUM suspicious endpoint CSOAI-ORG/sovereign-temple 50.217.254.165
API_GATEWAY = "http://50.217.254.165:41422" - MEDIUM suspicious endpoint CSOAI-ORG/sovereign-temple 50.217.254.173
DRAGON_COUNCIL_URL = "http://50.217.254.173:41021"