Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51192 analyzed
7507 re-analysis due
995 not analyzable
1 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- MEDIUM suspicious endpoint Holix t.me
"1. Откройте [@BotFather](https://t.me/BotFather) → /newbot → скопируйте токен\n" - MEDIUM suspicious endpoint ProfessionalWiki/MediaWiki-MCP-Server 169.254.169.254 (cloud metadata)
assertPublicDestination('http://169.254.169.254/latest/meta-data/'), - MEDIUM suspicious endpoint ProfessionalWiki/MediaWiki-MCP-Server 169.254.169.254 (cloud metadata)
headers: { Location: 'https://169.254.169.254/latest/meta-data/' }, - MEDIUM suspicious endpoint ProfessionalWiki/MediaWiki-MCP-Server 169.254.169.254 (cloud metadata)
'Refusing to fetch URL resolving to non-public address 169.254.169.254 (linkLocal): http://169.254.169.254/', - MEDIUM suspicious endpoint Peter-Ufens/iris-mcp-server 8.8.8.8
expect(assertSafeUrlSync('https://8.8.8.8/').hostname).toBe('8.8.8.8'); - MEDIUM suspicious endpoint Peter-Ufens/iris-mcp-server 169.254.169.254 (cloud metadata)
'https://169.254.169.254/latest/meta-data/', - MEDIUM suspicious endpoint Peter-Ufens/iris-mcp-server 169.254.169.254 (cloud metadata)
await expect(fetchText('https://169.254.169.254/latest/meta-data/')).rejects.toThrow(UrlGuardError); - MEDIUM suspicious endpoint Peter-Ufens/iris-mcp-server 169.254.169.254 (cloud metadata)
'https://169.254.169.254/latest/meta-data/', - HIGH dynamic exec symkit-mcp eval()/exec()
exec(result["script"], namespace) # must not raise NameError - HIGH dynamic exec symkit-mcp eval()/exec()
exec(script, namespace) # must not raise NameError - HIGH dynamic exec SethGammon/Citadel vm exec
vm.runInNewContext(fs.readFileSync(path.join(repo, 'core/forks/claude-launcher.js'), 'utf8'), context); - HIGH dynamic exec SethGammon/Citadel vm exec
vm.runInNewContext(source, { - HIGH obfuscation SethGammon/Citadel dynamic require()/import()
const loaded = await import(`file://${stubPath}`); - HIGH obfuscation SethGammon/Citadel dynamic require()/import()
const mod = await import('../runtimes/opencode/plugin/index.mjs?rp=' + Date.now() + tag); - HIGH dynamic exec SethGammon/Citadel vm exec
route = vm.runInNewContext(routeBlock + '\nroute;', {});