Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51197 analyzed
7502 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- MEDIUM suspicious endpoint kevinkda/schwab-marketdata-mcp 169.254.169.254 (cloud metadata)
"http://169.254.169.254/", - MEDIUM suspicious endpoint kevinkda/schwab-marketdata-mcp 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", - MEDIUM suspicious endpoint Sir-chawakorn/sanook-cli 169.254.169.254 (cloud metadata)
const r = await fetchWeb('http://169.254.169.254/latest/meta-data/', { fetchImpl }); - HIGH committed secret Sir-chawakorn/sanook-cli Anthropic key
sk-ant…(31 chars, redacted) - HIGH committed secret Sir-chawakorn/sanook-cli Anthropic key
sk-ant…(45 chars, redacted) - MEDIUM suspicious endpoint Sir-chawakorn/sanook-cli api.telegram.org
const api = (token: string, method: string): string => `https://api.telegram.org/bot${token}/${method}`; - MEDIUM suspicious endpoint Sir-chawakorn/sanook-cli api.telegram.org
const probe = await probeOk(fetchImpl, `https://api.telegram.org/bot${resolved.token}/getMe`, undefined, (r, body) => { - HIGH hidden prompt Sir-chawakorn/sanook-cli skill: hidden-unicode
- **Strip/reject bidi overrides** `U+202A–202E`, `U+2066–2069`, and zero-width `U+200B/200C/200D/FEFF` in identifiers and filenames — `safe.txt‹U+202E›gpj.exe` displays as `safe.txtexe.jpg` (Trojan So - HIGH dynamic exec narutopyy/agent-arena eval()/exec()
exec(compile(code, "<nl-strategy>", "exec"), g, loc) # noqa: S102 - allowlisted + restricted ns - HIGH committed secret Krishita17/MCP-Model-context-protocol OpenAI key
sk-sec…(24 chars, redacted) - MEDIUM suspicious endpoint Krishita17/MCP-Model-context-protocol 169.254.169.254 (cloud metadata)
assert_url_allowed("http://169.254.169.254/latest/meta-data/") - HIGH dynamic exec Krishita17/MCP-Model-context-protocol eval()/exec()
result = eval(expr) - HIGH dynamic exec Krishita17/MCP-Model-context-protocol pickle.loads()
data = pickle.loads(base64.b64decode(token)) - HIGH committed secret Krishita17/MCP-Model-context-protocol GitHub token
ghp_R3…(42 chars, redacted) - MEDIUM suspicious endpoint Krishita17/MCP-Model-context-protocol 169.254.169.254 (cloud metadata)
payload = "http://169.254.169.254/latest/meta-data/iam/security-credentials/"