Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH dynamic exec astrogilda/waitbus eval()/exec()
exec(src, namespace) - HIGH dynamic exec astrogilda/waitbus __import__ sink
utime_ns, stime_ns = read_daemon_cpu_ns(pid=__import__("os").getpid()) - HIGH committed secret astrogilda/waitbus GitHub fine-grained PAT
github…(93 chars, redacted) - MEDIUM suspicious endpoint brainbytes-dev/leashd us.posthog.com (telemetry)
host: process.env.NEXT_PUBLIC_POSTHOG_HOST || 'https://us.posthog.com', - MEDIUM suspicious endpoint brainbytes-dev/leashd us.posthog.com (telemetry)
api_host: process.env.NEXT_PUBLIC_POSTHOG_HOST || 'https://us.posthog.com', - HIGH dynamic exec kakon77777-commits/eveaegis-mcp pickle.loads()
restored = pickle.loads(pickle.dumps(make_grant())) - MEDIUM over-broad oauth scope kakon77777-commits/eveaegis-mcp delete_repo
if "delete_repo" not in scopes: - HIGH dynamic exec mockworld-mcp eval()/exec()
return bool(eval(expr, {"__builtins__": _SAFE_BUILTINS}, namespace)) # noqa: S307 - trusted local - HIGH committed secret JimmyWesley/MonkeyLLM Slack token
xoxb-a…(24 chars, redacted) - MEDIUM suspicious endpoint blinkboxhq/Blinkbox api.telegram.org
const { data: fileInfo } = await axios.get(`https://api.telegram.org/bot${token}/getFile`, { params: { file_id: mediaFileId }, timeout: 10000 }); - MEDIUM suspicious endpoint blinkboxhq/Blinkbox api.telegram.org
nt-mono text-[10px] text-zinc-500">POST https://api.telegram.org/bot<TOKEN>/setWebhook</span> with <span className="font-mono text-zinc-500">url</span> and optional <span className="font-mono te - MEDIUM suspicious endpoint blinkboxhq/Blinkbox your-ngrok.ngrok.io
placeholder="http://127.0.0.1:1234 or https://your-ngrok.ngrok.io" - MEDIUM suspicious endpoint blinkboxhq/Blinkbox abc123.ngrok.io
Then paste the ngrok URL (e.g. <span className="font-mono text-zinc-500">https://abc123.ngrok.io</span>) as Base URL below.{" "} - MEDIUM suspicious endpoint blinkboxhq/Blinkbox api.telegram.org
nt-mono text-[10px] text-zinc-500">POST https://api.telegram.org/bot<TOKEN>/setWebhook</span> with <span className="font-mono text-zinc-500">url</span> and optional <span className="font-mono te - MEDIUM suspicious endpoint blinkboxhq/Blinkbox 1.1.1.1
await assert.doesNotReject(() => assertSafeUrlResolved("https://1.1.1.1/"));