Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM over-broad oauth scope churichard/fluxmail https://mail.google.com/
export const CUSTOM_GMAIL_SCOPES = ['https://mail.google.com/', ...GOOGLE_IDENTITY_SCOPES]; - MEDIUM over-broad oauth scope churichard/fluxmail gmail.modify
export const GMAIL_SCOPES = ['https://www.googleapis.com/auth/gmail.modify', ...GOOGLE_IDENTITY_SCOPES]; - HIGH committed secret churichard/fluxmail Google OAuth client secret
GOCSPX…(35 chars, redacted) - HIGH suspicious skill script business-inference/skill-audit suspicious bundled script
'(curl|wget)[^|;]*\|[[:space:]]*(ba)?sh|iwr .*\|.*iex|source <\(curl' - HIGH dynamic exec lizard-build/lizard-studio vm exec
vm.runInNewContext(`(() => { ${toolbar.slice(start, end)} })()`, { - HIGH dynamic exec lizard-build/lizard-studio vm exec
vm.runInNewContext(source, sandbox); - HIGH dynamic exec lizard-build/lizard-studio vm exec
vm.runInNewContext(source, scope); - HIGH dynamic exec lizard-build/lizard-studio vm exec
vm.runInNewContext(source, { - HIGH dynamic exec lizard-build/lizard-studio vm exec
const primitiveTools = vm.runInNewContext(relay.slice(relay.indexOf("const TAB_ID ="), relay.indexOf("// ---- TCP bridge")) + "\nTOOLS"); - HIGH dynamic exec lizard-build/lizard-studio vm exec
vm.runInNewContext(readFileSync(new URL("../../src/background.js", import.meta.url), "utf8"), { - HIGH dynamic exec lizard-build/lizard-studio new Function()
const map = new Function("MODELS", `${grab("effortFor")}\n${grab("effortForModel")}\nreturn effortForModel;`)(MODELS); - HIGH credential in log Yuuqq/jules-dispatch credential in log
console.log(chalk.dim(` API key: ${'*'.repeat(8)}${result.values.apiKey.slice(-4)}`)); - HIGH dynamic exec alegauss/roadkeep eval()/exec()
exec(compile("raise ValueError('x')", "<string>", "exec"), {}) - MEDIUM suspicious endpoint f1shyondrugs/metis-ai 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data", - MEDIUM over-broad oauth scope f1shyondrugs/metis-ai https://www.googleapis.com/auth/cloud-platform
"https://www.googleapis.com/auth/cloud-platform",