Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH committed secret redrob-labs/redrob-cowork private key
PEM private key block (redacted) - HIGH dynamic exec redrob-labs/redrob-cowork new Function()
const longPath = new Function("path", `${source.slice(start, end)}; return longPath;`)(path) as ( - HIGH obfuscation redrob-labs/redrob-cowork dynamic require()/import()
const { processBlankSlateProfile } = await import(${JSON.stringify(profileModuleUrl)}); - MEDIUM suspicious endpoint redrob-labs/redrob-cowork us.i.posthog.com (telemetry)
const DEFAULT_POSTHOG_HOST = "https://us.i.posthog.com"; - HIGH dynamic exec berntpopp/genefoundry-router __import__ sink
for k in list(__import__("os").environ): - HIGH dynamic exec berntpopp/genefoundry-router unsafe yaml.load()
compose = yaml.load( - HIGH dynamic exec berntpopp/genefoundry-router unsafe yaml.load()
return yaml.load((DOCKER / name).read_text(), Loader=_ComposeLoader) # noqa: S506 - HIGH committed secret berntpopp/genefoundry-router GitHub fine-grained PAT
github…(51 chars, redacted) - HIGH committed secret berntpopp/genefoundry-router committed .env
env file shipped with populated values - MEDIUM over-broad oauth scope can4hou6joeng4/boss-agent-cli https://mail.google.com/
other = _FakePage("https://mail.google.com/") - MEDIUM suspicious endpoint kasumaputu6633/visbridge-mcp 169.254.169.254 (cloud metadata)
() => resolveSafeUrl(new URL("http://169.254.169.254/latest/meta-data"), []), - MEDIUM suspicious endpoint kasumaputu6633/visbridge-mcp 8.8.8.8
const addresses = await resolveSafeUrl(new URL("http://8.8.8.8/x.png"), []); - HIGH suspicious skill script JonusNattapong/chatgpt-pilot suspicious bundled script
Install: curl -fsSL https://x.ai/cli/install.sh | bash (or npm i -g @xai-official/grok) - HIGH dynamic exec JonusNattapong/chatgpt-pilot vm exec
vm.runInNewContext(fs.readFileSync(source, 'utf8'), { window, URL, URLSearchParams }); - HIGH dynamic exec JonusNattapong/chatgpt-pilot vm exec
return vm.runInNewContext(`(${template.slice(start, end)})`);