Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec marketing-data-hub unsafe yaml.load()
data = yaml.load(config_path.read_text(encoding="utf-8")) or {} - HIGH dynamic exec awarselabs/awarse-mcp eval()/exec()
locator = eval(py_expression, {"page": page}) - HIGH dynamic exec awarselabs/awarse-mcp eval()/exec()
healed_locator = eval(resolved_call, {"page": self._page}) - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAZZ…(20 chars, redacted) - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAIO…(20 chars, redacted) - HIGH dynamic exec cpaumelle/docplane __import__ sink
@pytest.mark.skipif(not __import__("os").environ.get("DB_HOST"), reason="requires a PostgreSQL database") - HIGH committed secret cpaumelle/docplane AWS access key id
AKIAIO…(20 chars, redacted) - MEDIUM suspicious endpoint surendranb/google-analytics-mcp analytics.google.com (telemetry)
_GA4_ADMIN_URL = "https://analytics.google.com/analytics/web/#/admin" - MEDIUM suspicious endpoint fouradata/mcp 1.2.3.4
ignoreProxies: ["http://1.2.3.4:8080", "socks5://5.6.7.8:1080"], - MEDIUM suspicious endpoint fouradata/mcp 8.8.8.8
test("3. 8.8.8.8 (Google DNS)", async () => assert.equal(await isBlocked("https://8.8.8.8"), false)); - MEDIUM suspicious endpoint fouradata/mcp 1.1.1.1
test("2. 1.1.1.1 (Cloudflare)", async () => assert.equal(await isBlocked("https://1.1.1.1"), false)); - MEDIUM suspicious endpoint fouradata/mcp 1.1.1.1
const target = { method: "GET", url: "https://1.1.1.1/" }; - MEDIUM suspicious endpoint fouradata/mcp 1.1.1.1
const target = { method: "GET", url: "https://1.1.1.1/" }; - MEDIUM suspicious endpoint fouradata/mcp 169.254.169.254 (cloud metadata)
aws_metadata: "http://169.254.169.254/latest/meta-data/", - MEDIUM suspicious endpoint fouradata/mcp 172.32.0.0
just_outside_172: "http://172.32.0.0", // public, must NOT block