Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH committed secret jin-bo/agentao AWS access key id
AKIAZZ…(20 chars, redacted) - HIGH committed secret jin-bo/agentao OpenAI key
sk-pro…(28 chars, redacted) - HIGH committed secret jin-bo/agentao private key
PEM private key block (redacted) - MEDIUM suspicious endpoint jin-bo/agentao 1.127.0.0
assert e.decide("web_fetch", {"url": "http://1.127.0.0.1/"}) == PermissionDecision.ASK - MEDIUM suspicious endpoint jin-bo/agentao 169.254.169.254 (cloud metadata)
assert e.decide("web_fetch", {"url": "http://169.254.169.254/latest/meta-data"}) == PermissionDecision.DENY - HIGH dynamic exec jin-bo/agentao __import__ sink
**__import__("os").environ, - HIGH dynamic exec jin-bo/agentao __import__()
adapter_mod = __import__( - HIGH dynamic exec jin-bo/agentao eval()/exec()
exec( - HIGH hidden prompt jin-bo/agentao agent-rules: tag-smuggling
smuggled ascii: "gbsctgbwlsgbeng" (+1 more line) - MEDIUM suspicious endpoint Crypto-Data-API/algobrain t.me
lines.append(f"| **Telegram** | [{telegram}](https://t.me/{telegram}){tg_str} |") - HIGH dynamic exec n24q02m/crg __import__()
__import__( - HIGH dynamic exec full-stack-dev-johncastrosanabria/MultiAgent-Software-Engineering-Team. __import__()
for engine, spec in __import__( - MEDIUM suspicious endpoint full-stack-dev-johncastrosanabria/MultiAgent-Software-Engineering-Team. 1.1.1.1
"http://1.1.1.1", check=False).returncode != 0 - HIGH obfuscation rain6fish/KeelBase dynamic require()/import()
await import(`file://${root}/Server-NestJS/src/plugins/plugins/notify.plugin.ts`).catch(() => {}); - MEDIUM suspicious endpoint rain6fish/KeelBase 169.254.169.254 (cloud metadata)
.mockResolvedValue({ status: 302, ok: false, headers: { get: () => 'http://169.254.169.254/latest' } });