Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- MEDIUM suspicious endpoint fd-open-data-mcp 5.6.7.8
session.add(Cluster(name="ok", api_server="https://5.6.7.8:6443", - MEDIUM suspicious endpoint fd-open-data-mcp 1.2.3.4
session.add(Cluster(name="dead", api_server="https://1.2.3.4:6443", - HIGH dynamic exec fd-open-data-mcp __import__ sink
_STALE_MIN = int(__import__("os").environ.get("SCRAW_STALE_MINUTES", "90")) - HIGH dynamic exec fd-open-data-mcp eval()/exec()
exec(code, namespace) - HIGH dynamic exec lucagattoni/pinakes pickle.loads()
restored = pickle.loads(pickle.dumps(PinakesError("broke", remedy="fix it"))) - HIGH dynamic exec lucagattoni/pinakes __import__()
return __import__(module, fromlist=["_"]) - HIGH dynamic exec lucagattoni/pinakes __import__()
return __import__(module, fromlist=["_"]) - MEDIUM suspicious endpoint 686f6c61/mcp-zero-trust-layer 8.8.8.8
result = validate_url({"url": "http://8.8.8.8/"}, {"resolve_dns": False}) - HIGH dynamic exec OrangeproAI/orangepro-mcp new Function()
expect(() => new Function(body)).not.toThrow(); - HIGH committed secret OrangeproAI/orangepro-mcp OpenAI key
sk-AAA…(31 chars, redacted) - HIGH dynamic exec OrangeproAI/orangepro-mcp new Function()
expect(() => new Function(body)).not.toThrow(); - HIGH dynamic exec OrangeproAI/orangepro-mcp new Function()
Xu=34,Gu=10,Vu=13;function Wu(t){return new Function(\"d\",\"return {\"+t.map((function(t,n){return JSON.stringify(t)+\": d[\"+n+'] || \"\"'})).join(\",\")+\"}\")}function Zu(t){var n=Object.create(nu - HIGH obfuscation bytefolk/mem dynamic require()/import()
const { runProcess } = require(${JSON.stringify(wrapperPath)}); - HIGH obfuscation bytefolk/mem base64 decode → exec sink
const bytes = Buffer.from(${JSON.stringify(bytes.toString("base64"))}, "base64"); - HIGH obfuscation bytefolk/mem dynamic require()/import()
const { install } = require(${JSON.stringify(installPath)});