Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50100 analyzed
8073 re-analysis due
988 not analyzable
2 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187701
- MEDIUM over-broad oauth scope sageox/agent-toolkit delete_repo
const { result, lines } = await brokered("delete_repo", { repo: "acme/service" }); - HIGH committed secret sageox/agent-toolkit Slack token
xoxb-m…(18 chars, redacted) - HIGH committed secret sageox/agent-toolkit Anthropic key
sk-ant…(34 chars, redacted) - HIGH committed secret sageox/agent-toolkit Slack token
xoxb-a…(16 chars, redacted) - HIGH dynamic exec Cyrax321/CONTINUUM eval()/exec()
exec("from continuum.gateway import *", namespace) - HIGH dynamic exec Cyrax321/CONTINUUM __import__ sink
env = {**dict(__import__("os").environ), "PYTHONPATH": src} - HIGH dynamic exec Cyrax321/CONTINUUM __import__()
__import__( - HIGH dynamic exec Cyrax321/CONTINUUM eval()/exec()
exec(code, namespace) - HIGH committed secret heliograph-io/heliograph GitHub fine-grained PAT
github…(37 chars, redacted) - HIGH committed secret heliograph-io/heliograph GitHub fine-grained PAT
github…(33 chars, redacted) - HIGH committed secret heliograph-io/heliograph GitLab token
glpat-…(27 chars, redacted) - HIGH obfuscation mcp-tool-shop-org/mcp-arcade-cabinets dynamic require()/import()
const mod = await import(pathToFileURL(path.resolve(`packages/${pkg}/dist/play.js`)).href).catch( - HIGH dynamic exec JUST-Limbo/limbo-ai-toolkit new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec JUST-Limbo/limbo-ai-toolkit new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - MEDIUM suspicious endpoint forgesworn/bray 100.128.0.1
expect(() => validatePublicUrl('http://100.128.0.1')).not.toThrow()