Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50064 analyzed
8099 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- MEDIUM suspicious endpoint leancoderkavy/premiere-pro-mcp us.i.posthog.com (telemetry)
host: "https://us.i.posthog.com", - MEDIUM suspicious endpoint leancoderkavy/premiere-pro-mcp us.i.posthog.com (telemetry)
const host = process.env.POSTHOG_HOST ?? "https://us.i.posthog.com"; - MEDIUM suspicious endpoint leancoderkavy/premiere-pro-mcp www.google-analytics.com (telemetry)
"connect-src 'self' https://www.google.com https://www.google-analytics.com https://www.googletagmanager.com https://us.i.posthog.com https://*.posthog.com", - MEDIUM suspicious endpoint leancoderkavy/premiere-pro-mcp us.i.posthog.com (telemetry)
host: env.POSTHOG_HOST ?? "https://us.i.posthog.com", - MEDIUM suspicious endpoint hyperpolymath/boj-server-cartridges sentry.io (telemetry)
return url || "https://sentry.io/api/0"; - HIGH obfuscation hyperpolymath/boj-server-cartridges dynamic require()/import()
const mod = await import(`../${cartridgeName}/mod.js`); - HIGH committed secret hyperpolymath/boj-server-cartridges Slack token
xoxb-f…(20 chars, redacted) - MEDIUM over-broad oauth scope sageox/agent-toolkit delete_repo
const { result, lines } = await brokered("delete_repo", { repo: "acme/service" }); - HIGH committed secret sageox/agent-toolkit Slack token
xoxb-m…(18 chars, redacted) - HIGH committed secret sageox/agent-toolkit Anthropic key
sk-ant…(34 chars, redacted) - HIGH committed secret sageox/agent-toolkit Slack token
xoxb-a…(16 chars, redacted) - HIGH committed secret jmrplens/gitlab-mcp-server GitLab token
glpat-…(33 chars, redacted) - HIGH dynamic exec Cyrax321/CONTINUUM eval()/exec()
exec("from continuum.gateway import *", namespace) - HIGH dynamic exec Cyrax321/CONTINUUM __import__ sink
env = {**dict(__import__("os").environ), "PYTHONPATH": src} - HIGH dynamic exec Cyrax321/CONTINUUM __import__()
__import__(