Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH obfuscation Gadsotek/artifactflow dynamic require()/import()
import('${pageCatalogLiveAsset}').then(() => { - HIGH committed secret Gadsotek/artifactflow OpenAI key
sk-thi…(33 chars, redacted) - HIGH suspicious skill script Nocetic/flowly suspicious bundled script
python3 -c "import manim" 2>/dev/null && ok "Manim $(manim --version 2>&1 | head -1)" || { fail "Manim not installed: pip install manim"; errors=$((errors+1)); } - HIGH committed secret Nocetic/flowly OpenAI key
sk-qqq…(31 chars, redacted) - HIGH committed secret Nocetic/flowly GitHub fine-grained PAT
github…(47 chars, redacted) - HIGH committed secret Nocetic/flowly Anthropic key
sk-ant…(39 chars, redacted) - HIGH dynamic exec Nocetic/flowly eval()/exec()
return eval(code, {"__builtins__": {}}, {**_MATHNS, **values}) # noqa: S307 trusted CLI - HIGH dynamic exec Nocetic/flowly eval()/exec()
expr = eval(a.expr, {a.func: f, a.var: x, "sp": sp}) # noqa: S307 trusted CLI input - HIGH dynamic exec Nocetic/flowly eval()/exec()
return eval(expr, env) # noqa: S307 — fixed safe env, no builtins - MEDIUM suspicious endpoint Nocetic/flowly abc123.ngrok.app
placeholder="https://abc123.ngrok.app", - MEDIUM suspicious endpoint Nocetic/flowly docs.sentry.io (telemetry)
docs_url="https://docs.sentry.io/api/auth/", - MEDIUM suspicious endpoint Nocetic/flowly sentry.io (telemetry)
f"https://sentry.io/api/0/organizations/{org}/", - MEDIUM suspicious endpoint Nocetic/flowly api.telegram.org
url = f"https://api.telegram.org/bot{token}/getMe" - HIGH dynamic exec Nocetic/flowly __import__ sink
env = {**__import__("os").environ, "CLOUDSDK_PYTHON": python3} - MEDIUM suspicious endpoint Nocetic/flowly api.telegram.org
url = f"https://api.telegram.org/bot{token}/getMe"