Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
value = eval(value) - HIGH dynamic exec Zuehlke/labview-mcp __import__()
mod = __import__(exc_value.name) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(cmd, globals, locals) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(code, global_ns, local_ns) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(line) - HIGH dynamic exec Zuehlke/labview-mcp __import__()
__import__(pkg_name) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(code, run_globals) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
thisobject = eval(expr, self.namespace) - HIGH dynamic exec Zuehlke/labview-mcp __import__()
name = __import__(modname).__doc__ or '' - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
doc(eval(request), 'Help on %s:', output=self._output, is_cli=is_cli) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(cmd, globals, locals) - HIGH dynamic exec Zuehlke/labview-mcp __import__()
__import__(info.name) - HIGH dynamic exec Zuehlke/labview-mcp __import__()
__import__(module_name, level=0) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(source_with_closure, {}, ns) - HIGH dynamic exec Zuehlke/labview-mcp eval()/exec()
exec(open(filename).read(), vars)