Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH dynamic exec kalebteccom/browxai new Function()
const fn = new Function("caches", "Response", "btoa", "atob", "location", `return ${expr}`); - HIGH dynamic exec kalebteccom/browxai new Function()
const fn = new Function("sandbox", `with (sandbox) { ${script} }`); - HIGH dynamic exec kalebteccom/browxai new Function()
const factory = new Function("return (" + a.src + ");") as () => PageScript; - HIGH dynamic exec kalebteccom/browxai new Function()
const run = new Function( - MEDIUM over-broad oauth scope kalebteccom/browxai https://mail.google.com/
"https://mail.google.com/mail/u/0/", - HIGH dynamic exec kalebteccom/browxai new Function()
const fn = new Function("window", "navigator", buildStealthScript()); - HIGH dynamic exec kalebteccom/browxai eval()
const PAGE_SCRIPT = eval(m[1]); // our own source; no ${} interpolation in this literal - HIGH obfuscation theluckystrike/mcp-invoice-generator dynamic require()/import()
const inv = await import(${JSON.stringify(join(here, "..", "dist", "money.js"))}); - HIGH dynamic exec yubinbin32-ops/ContextOS new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec Fantasality/dsh-origin-plugin __import__()
__import__(mod) - HIGH dynamic exec Fantasality/dsh-origin-plugin eval()/exec()
py_out = eval(py_expr, {"__builtins__": {}}, env) - MEDIUM suspicious endpoint n24q02m/wet 169.254.169.254 (cloud metadata)
assert not is_safe_url("http://169.254.169.254") - MEDIUM suspicious endpoint n24q02m/wet 169.254.169.254 (cloud metadata)
{"action": "extract", "urls": ["http://169.254.169.254/latest/meta-data"]}, - MEDIUM suspicious endpoint n24q02m/wet 169.254.169.254 (cloud metadata)
"urls": ["http://169.254.169.254/latest/meta-data"], - MEDIUM suspicious endpoint n24q02m/wet 169.254.169.254 (cloud metadata)
{"action": "extract", "urls": ["http://169.254.169.254/latest/meta-data"]},