MCP Observatory
1m ago Tracked 60,021 Last 1m ago 24h 2,474

Code analysis

static source read inferred

Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.

analysis coverage 86% of 59,695 analyzable servers
51192 analyzed
7507 re-analysis due
995 not analyzable
1 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source

Running analyzer v33. The scanner changelog explains what each version detects and when it changed.

committed secrets
  1. comisai/comis 62
  2. Vaibhav91one/assay 36
  3. Sertelegger/holdfast 35
  4. Cepeppe/handoff-mcp 31
  5. clidey/whodb 30
dynamic-exec sinks
  1. zilet/cairn 160
  2. abhishekpandaOfficial/XOne 149
  3. talirezun/the-curator 84
  4. TNLegend/PortaMCP 60
  5. mayowa-kalejaiye/Failures 55
suspicious endpoints
  1. nordsym/apiclaw 156
  2. tourhabk-ui/pos 115
  3. CarlxsMG/mcpbridge 90
  4. ergoveritas1-alt/certscore.ai 78
  5. JSONbored/loopover 68
credentials in logs
  1. gosswerner1-max/lazyrelay 8
  2. Hekkova/hekkova-mcp 6
  3. pendpost/pendpost 6
  4. Canonry/canonry 5
  5. KevinRabun/judges 5
over-broad OAuth scopes
  1. khill1269/servalsheets 82
  2. oneKn8/smart-mcps 26
  3. pipeshub-ai/pipeshub-ai 26
  4. lolxl/safespace-mcp 24
  5. BrianArfi/ai-second-brain 23
suspicious bundled scripts
  1. Dicklesworthstone/mcp_agent_mail 11
  2. syed-maaz/work-intelligence-mcp 7
  3. frankieramirez/ripen 6
  4. horustechltd/horus-flow-mcp 4
  5. itqanlab/agent-toolkit 4
ships skill files
  1. Amey-Thakur/AI-SKILLS 200
  2. ArasaniRohithReddy/LearningOS 200
  3. MANVENDRA-github/agentry 200
  4. Sandeeprdy1729/timps-swarm 200
  5. agentic-flow 200
code findings 15 shown
  1. HIGH committed secret PanomaAI/panoma Stripe live key sk_liv…(31 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/ quotes.test.ts :41
  2. HIGH committed secret PanomaAI/panoma Anthropic key sk-ant…(50 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/ quotes.test.ts :35
  3. HIGH committed secret PanomaAI/panoma OpenAI key sk-pro…(48 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/ quotes.test.ts :29
  4. MEDIUM suspicious endpoint PanomaAI/panoma sentry.io (telemetry) url: `https://sentry.io/issues/?project=${projectId}`,
    PanomaAI-panoma-eebdc72/packages/core/src/ links.ts :396
  5. HIGH committed secret PanomaAI/panoma Anthropic key sk-ant…(107 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/history/fixtures/ facts-session.jsonl :1
  6. HIGH committed secret PanomaAI/panoma Anthropic key sk-ant…(108 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/history/fixtures/ facts-codex.jsonl :3
  7. HIGH committed secret PanomaAI/panoma Anthropic key sk-ant…(101 chars, redacted)
    PanomaAI-panoma-eebdc72/packages/core/src/history/ facts-codex.test.ts :397
  8. HIGH committed secret PanomaAI/panoma Anthropic key sk-ant…(49 chars, redacted)
    PanomaAI-panoma-eebdc72/apps/cli/src/ handoff-command.test.ts :797
  9. MEDIUM suspicious endpoint maleon17/codex-ask t.me return f"https://t.me/c/{chat_id[4:]}/{message.id}"
    maleon17-codex-ask-5a4175f/ codex_ask.py :1736
  10. HIGH committed secret bug-ops/zeph OpenAI key sk-RED…(31 chars, redacted)
    bug-ops-zeph-4e2fe0d/src/commands/ doctor.rs :1263
  11. HIGH committed secret bug-ops/zeph OpenAI key sk-sup…(27 chars, redacted)
    bug-ops-zeph-4e2fe0d/crates/zeph-subagent/src/ agent_loop.rs :2393
  12. HIGH committed secret bug-ops/zeph OpenAI key sk-sup…(27 chars, redacted)
    bug-ops-zeph-4e2fe0d/crates/zeph-sanitizer/src/ secret_mask.rs :25
  13. HIGH committed secret bug-ops/zeph OpenAI key sk-sup…(27 chars, redacted)
    bug-ops-zeph-4e2fe0d/crates/zeph-core/src/agent/tool_execution/tests/ sanitize_and_native_tests.rs :1433
  14. HIGH committed secret bug-ops/zeph Slack token xoxb-s…(17 chars, redacted)
    bug-ops-zeph-4e2fe0d/crates/zeph-channels/src/slack/ api.rs :234
  15. HIGH committed secret bug-ops/zeph OpenAI key sk-RED…(31 chars, redacted)
    bug-ops-zeph-4e2fe0d/ .gitleaks.toml :28