Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50108 analyzed
8067 re-analysis due
988 not analyzable
0 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187702
- HIGH obfuscation Stravica/rcf-lite dynamic require()/import()
const mod = await import(${JSON.stringify(FIXTURE_SERVER)}); - MEDIUM suspicious endpoint gsearch-mcp-cli 169.254.169.254 (cloud metadata)
validate_url("http://169.254.169.254") - HIGH dynamic exec freecad-mcp eval()/exec()
exec(code, _EXEC_NAMESPACE) - MEDIUM suspicious endpoint n24q02m/claude-plugins 192.0.0.1
"https://192.0.0.1/harness-adapter", - HIGH committed secret n24q02m/claude-plugins Google OAuth client secret
GOCSPX…(35 chars, redacted) - HIGH committed secret n24q02m/claude-plugins Google OAuth client secret
GOCSPX…(35 chars, redacted) - HIGH committed secret coffeegrind123/instantcoffee committed .env
env file shipped with populated values - HIGH dynamic exec Veightor/chutes-agent-toolkit eval()/exec()
return str(eval(expression, {"__builtins__": {}}, {})) - MEDIUM suspicious endpoint DingHappy/VortoCode 1.1.1.1
out = wf.fetch_url("http://1.1.1.1/readme.txt") - MEDIUM suspicious endpoint DingHappy/VortoCode 8.8.8.8
out = wf.fetch_url("http://8.8.8.8/doc") # 公网 IP，过 SSRF - MEDIUM suspicious endpoint DingHappy/VortoCode 169.254.169.254 (cloud metadata)
out = await _tool(tmp_path).handler({"url": "http://169.254.169.254/latest/meta-data/"}) - MEDIUM suspicious endpoint DingHappy/VortoCode api.telegram.org
assert made[0].url.startswith("https://api.telegram.org/file/bot") - MEDIUM suspicious endpoint DingHappy/VortoCode 169.254.169.254 (cloud metadata)
context.http_handler(route, _Request("http://169.254.169.254/latest/meta-data")) - MEDIUM suspicious endpoint DingHappy/VortoCode 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", # 云元数据 SSRF 经典 - MEDIUM suspicious endpoint DingHappy/VortoCode api.telegram.org
url = f"https://api.telegram.org/bot{self._token}/{method}"