Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51160 analyzed
7536 re-analysis due
994 not analyzable
0 not yet analyzed
4848 source gone
not analyzable
794 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6282
- dynamic exec 11998
- obfuscation 3646
- suspicious endpoint 12540
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190134
- MEDIUM suspicious endpoint Sheldenshi/gini-agent us.i.posthog.com (telemetry)
expect(seenHost).toBe("https://us.i.posthog.com"); - MEDIUM suspicious endpoint Sheldenshi/gini-agent api.telegram.org
const raw = "fetch failed: https://api.telegram.org/bot123456:ABC-def_GHI/getMe"; - HIGH committed secret Sheldenshi/gini-agent Google OAuth client secret
GOCSPX…(35 chars, redacted) - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/drive
const scopes = ["https://www.googleapis.com/auth/drive"]; - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/spreadsheets
"https://www.googleapis.com/auth/spreadsheets", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/documents
"https://www.googleapis.com/auth/documents", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent gmail.modify
"https://www.googleapis.com/auth/gmail.modify" - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/documents
"https://www.googleapis.com/auth/documents", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent gmail.modify
"https://www.googleapis.com/auth/gmail.modify", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/spreadsheets
"https://www.googleapis.com/auth/spreadsheets", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent https://www.googleapis.com/auth/drive
"https://www.googleapis.com/auth/drive", - MEDIUM over-broad oauth scope Sheldenshi/gini-agent gmail.modify
"/tmp/gws-personal": signedIn("me@example.com", ["https://www.googleapis.com/auth/gmail.modify"]), - MEDIUM suspicious endpoint Sheldenshi/gini-agent 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", - HIGH dynamic exec MonyetBatu/practice-theory-implementation eval()/exec()
return eval(code, {"__builtins__": {}}, {"args": arguments}) - HIGH dynamic exec MonyetBatu/practice-theory-implementation __import__()
__import__(module_name)