Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50108 analyzed
8067 re-analysis due
988 not analyzable
0 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187702
- MEDIUM suspicious endpoint ChronoAIProject/Ornn eu.i.posthog.com (telemetry)
const FAKE_HOST = "https://eu.i.posthog.com"; - MEDIUM suspicious endpoint ChronoAIProject/Ornn 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", - HIGH hidden prompt BrightbeamAI/chap readme: hidden-unicode
when one is present. Try it: paste `{"amount": "100‹U+202E›00.1‹U+202C› USD"}` into - HIGH obfuscation bosens-China/ai-i18n dynamic require()/import()
`${imports.map((specifier) => `await import(${JSON.stringify(specifier)});`).join('\n')}\nconsole.log(${JSON.stringify(diagnosticMessage(`已验证 ${imports.length} 个发布入口。`, `Verified ${imports.length} rel - HIGH dynamic exec bosens-China/ai-i18n new Function()
const execute = new Function( - HIGH obfuscation bosens-China/ai-i18n dynamic require()/import()
const messages = import(${JSON.stringify(localeModuleId(locale))}).then((module) => module.default); - MEDIUM suspicious endpoint saucelabs/sauce-api-mcp google-analytics.com (telemetry)
"request": {"url": "https://google-analytics.com/collect"}, - MEDIUM suspicious endpoint saucelabs/sauce-api-mcp www.google-analytics.com (telemetry)
entry = self._make_entry(url="https://www.google-analytics.com/collect") - HIGH dynamic exec utyagi24/klarpdf eval()/exec()
exec(compile(path.read_text(encoding="utf-8"), str(path), "exec"), module.__dict__) - HIGH obfuscation AtomicBot-ai/atomic-agent dynamic require()/import()
`const { pdfExtractor } = await import(${JSON.stringify( - MEDIUM suspicious endpoint AtomicBot-ai/atomic-agent 169.254.169.254 (cloud metadata)
{ url: "http://169.254.169.254/latest/meta-data/" }, - HIGH dynamic exec AtomicBot-ai/atomic-agent vm exec
vm.compileFunction(source, CJS_WRAPPER_PARAMS, { filename: name }), - MEDIUM suspicious endpoint AtomicBot-ai/atomic-agent o1.ingest.sentry.io (telemetry)
expect(parseSentryDsn("https://o1.ingest.sentry.io/1")).toBeNull(); - MEDIUM suspicious endpoint AtomicBot-ai/atomic-agent o42.ingest.sentry.io (telemetry)
"https://o42.ingest.sentry.io/api/987/envelope/", - MEDIUM suspicious endpoint AtomicBot-ai/atomic-agent o1.ingest.sentry.io (telemetry)
expect(url).toBe("https://o1.ingest.sentry.io/api/7/envelope/");