Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH obfuscation streamient/streamient dynamic require()/import()
const { default: adminRoutes } = await import(`../routes/admin.js?admin_user_export_test=${Date.now()}_${Math.random()}`); - HIGH obfuscation streamient/streamient dynamic require()/import()
const { default: adminRoutes } = await import(`../routes/admin.js?admin_settings_test=${Date.now()}_${Math.random()}`); - HIGH dynamic exec streamient/streamient vm exec
await vm.runInNewContext(source, context); - HIGH dynamic exec streamient/streamient new Function()
result[paramName] = new Function(`return ${value}`)(); - HIGH dynamic exec DataArche/SSWorld new Function()
new Function(readFileSync(path.join(SSDL_ROOT, "runtime", "ssdl-builtins.js"), "utf8")).call(globalScope); - HIGH dynamic exec MasayukiTa/m365-copilot-companion-mcp eval()/exec()
cap = eval(m.group(1), {"__builtins__": {}}) - HIGH dynamic exec MasayukiTa/m365-copilot-companion-mcp __import__ sink
assert __import__("os").path.isfile(store) - HIGH dynamic exec MasayukiTa/m365-copilot-companion-mcp eval()/exec()
exec(compile(program, "<bench>", "exec"), ns) - HIGH dynamic exec lotchuazzz-crypto/papergraph-mcp unsafe yaml.load()
workflow = yaml.load( - HIGH committed secret AndrewXuTurtle/mcpaudit GitHub token
ghp_AA…(40 chars, redacted) - MEDIUM suspicious endpoint surendranb/google-analytics-mcp analytics.google.com (telemetry)
_GA4_ADMIN_URL = "https://analytics.google.com/analytics/web/#/admin" - HIGH dynamic exec TheGaySupreme123/yoetz __import__()
purpose=__import__( - HIGH dynamic exec TheGaySupreme123/yoetz __import__()
__import__( - HIGH committed secret TheGaySupreme123/yoetz OpenAI key
sk-pro…(29 chars, redacted) - HIGH dynamic exec TheGaySupreme123/yoetz __import__()
real_assert = __import__(