Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51192 analyzed
7507 re-analysis due
995 not analyzable
1 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH hidden prompt davepoon/buildwithclaude skill: skill-exfil
secret→sink: **Auth header**: `X-Shopify-Access-Token: ${SHOPIFY_TOKEN}` - HIGH dynamic exec @jpisnice/shadcn-ui-mcp-server new Function()
const obj = new Function(`return (${sanitized})`)(); - MEDIUM suspicious endpoint harness-mcp-v2 1.2.3.4
" {list:{elements:[{cluster:'staging', url:'https://1.2.3.4'}, {cluster:'prod', url:'https://2.3.4.5'}]}}\n" + - MEDIUM suspicious endpoint harness-mcp-v2 docs.datadoghq.com (telemetry)
te/region identifier. Valid values (per https://docs.datadoghq.com/getting_started/site/): \"datadoghq.com\" (US1), \"us3.datadoghq.com\" (US3), \"us5.datadoghq.com\" (US5), \"datadoghq.eu\" (EU1), \" - MEDIUM suspicious endpoint harness-mcp-v2 docs.datadoghq.com (telemetry)
datadoghq.eu", "ap1.datadoghq.com"; see https://docs.datadoghq.com/getting_started/site/), datadogCredentialsSecretName (REQUIRED on Kubernetes — name of k8s secret containing "dd-api-key" and "dd-app - MEDIUM suspicious endpoint browser-devtools-mcp us.posthog.com (telemetry)
kaD8OaYPa4bIqqUoxsCfeFsy",POSTHOG_HOST="https://us.posthog.com",_initialized=!1,_client=null,_anonymousId="",_enabled=!1,_source="mcp-unknown",_mcpTransport,_browserDevtoolsVersion=(()=>{let candidate - MEDIUM suspicious endpoint @masonator/coolify-mcp 169.254.169.254 (cloud metadata)
'https://169.254.169.254/latest/meta-data', - MEDIUM suspicious endpoint @masonator/coolify-mcp 169.254.169.254 (cloud metadata)
await expect(provider.resolveClient('https://169.254.169.254/latest/client.json')).rejects.toThrow(/could not be fetched/); - HIGH dynamic exec kostia-egik/geomwright eval()/exec()
return float(eval(expression, {"__builtins__": {}}, namespace)) - HIGH dynamic exec kostia-egik/geomwright eval()/exec()
return float(eval(str(expression).replace("^", "**"), {"__builtins__": {}}, env)) - HIGH dynamic exec kostia-egik/geomwright eval()/exec()
value = eval(expression, {"__builtins__": {}}, namespace) - HIGH dynamic exec kostia-egik/geomwright __import__ sink
subprocess_module = __import__("subprocess") - HIGH dynamic exec kostia-egik/geomwright __import__ sink
subprocess_module = __import__("subprocess") - HIGH dynamic exec shrec/AIWorkHub __import__ sink
__import__("os").name == "nt", reason="POSIX proc-identity / process groups" - HIGH committed secret shrec/AIWorkHub Stripe live key
sk_liv…(28 chars, redacted)