Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50100 analyzed
8073 re-analysis due
988 not analyzable
2 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187702
- HIGH dynamic exec Beat-YT/omnivox-mcp new Function()
compiledTemplateCache[templateName] = new Function("$item", "Dictio", "FnctCommun", "Page", compiledCode.join("")) - HIGH obfuscation Beat-YT/omnivox-mcp dynamic require()/import()
require("./locale/" + a), - HIGH dynamic exec Beat-YT/omnivox-mcp new Function()
compiledTemplateCache[templateName] = new Function("$item","Dictio","FnctCommun","Page",compiledCode.join("")) - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
result = _parse_tme_link("https://t.me/vlbecode/355") - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
links = [(10, 4, "https://example.com/a_(b)"), (17, 5, "https://t.me/example")] - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
exported_invite=types.ChatInviteExported(link="https://t.me/+group", admin_id=1, date=None), - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
exported_invite=types.ChatInviteExported(link="https://t.me/+group", admin_id=1, date=None), - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
"url": "https://t.me/deep_reality", - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
"url": "https://t.me/deep_reality", - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
_full_chat_result(participant_user_ids=(1, 2, 3), invite_link="https://t.me/+abcdef"), - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
(" https://t.me/project_room ", "https://t.me/project_room"), - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
@pytest.mark.parametrize("selector", ["@forum_bot", "https://t.me/forum_bot"]) - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
result = await trace_service._resolve_trace_account({"account": "https://t.me/alice"}) - MEDIUM suspicious endpoint j2h4u/mcp-telegram t.me
return f"https://t.me/{username}" - MEDIUM suspicious endpoint octarq-org/octarq discord.com
url: "https://discord.com/api/webhooks/1",