Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50877 analyzed
7738 re-analysis due
994 not analyzable
1 not yet analyzed
4843 source gone
not analyzable
793 too large 201 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6279
- dynamic exec 11963
- obfuscation 3642
- suspicious endpoint 12517
- credential in log 718
- over-broad oauth scope 2539
- suspicious skill script 197
- bundled IDE extension 50
- skill file 189916
- MEDIUM suspicious endpoint ankimcp/anki-mcp-server xyz789.ngrok.io
const context2 = createMockContext("https://xyz789.ngrok.io"); - MEDIUM suspicious endpoint ankimcp/anki-mcp-server abc123.ngrok.io
const context1 = createMockContext("https://abc123.ngrok.io"); - MEDIUM suspicious endpoint ankimcp/anki-mcp-server abc123.ngrok.io
cli.box("Ngrok Tunnel Active", "https://abc123.ngrok.io"); - MEDIUM suspicious endpoint observer-protocol/at-directory 169.254.169.254 (cloud metadata)
res.writeHead(302, { Location: 'https://169.254.169.254/latest/meta-data/' }); - HIGH obfuscation frumu-ai/tandem dynamic require()/import()
moduleNames.map((name) => [name, require(join(directory, `${name}.js`))]) - HIGH committed secret frumu-ai/tandem Slack token
xoxb-g…(18 chars, redacted) - HIGH committed secret frumu-ai/tandem Slack token
xoxb-g…(18 chars, redacted) - HIGH committed secret frumu-ai/tandem GitHub fine-grained PAT
github…(39 chars, redacted) - HIGH dynamic exec allmonday/pydantic-resolve eval()/exec()
exec(code, ns, ns) - HIGH committed secret kubeview-mcp private key
PEM private key block (redacted) - HIGH obfuscation kubeview-mcp dynamic require()/import()
const { main } = await import(`file://${finalIndexPath}`); - HIGH dynamic exec strands-agents/sdk-python eval()/exec()
return eval(expression) - HIGH dynamic exec strands-agents/sdk-python pickle.loads()
@pytest.mark.parametrize("clone", [copy.deepcopy, lambda state: pickle.loads(pickle.dumps(state))]) - HIGH dynamic exec strands-agents/sdk-python eval()/exec()
return str(eval(expression)) - HIGH dynamic exec strands-agents/sdk-python eval()/exec()
return str(eval(expression))