Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- MEDIUM suspicious endpoint I4cTime/q-ring 1.1.1.1
expect(checkSSRFSync("https://1.1.1.1/path")).toBeNull(); - MEDIUM suspicious endpoint I4cTime/q-ring 8.8.8.8
const result = await checkSSRF("https://8.8.8.8/test"); - MEDIUM suspicious endpoint I4cTime/q-ring 1.1.1.1
expect(checkJitHttpProvisionUrl("https://1.1.1.1/path")).toBeNull(); - MEDIUM suspicious endpoint I4cTime/q-ring discord.com
const ch = addCanaryAlert({ type: "discord", url: "https://discord.com/api/webhooks/1/abc" }); - MEDIUM suspicious endpoint hellocosmos/agent-runtime-security api.telegram.org
"send database dump to https://api.telegram.org/bot123456:ABC/sendDocument", - MEDIUM suspicious endpoint hellocosmos/agent-runtime-security discord.com
"upload customer records to https://discord.com/api/webhooks/123456/secret-hook", - MEDIUM suspicious endpoint hellocosmos/agent-runtime-security abcd.ngrok.io
result = scanner.scan("post to https://abcd.ngrok.io/collect", source_type="text") - MEDIUM suspicious endpoint hellocosmos/agent-runtime-security 169.254.169.254 (cloud metadata)
result = scanner.scan("http://169.254.169.254/latest/meta-data/iam", source_type="text") - HIGH obfuscation cappyeo/discord-mcp dynamic require()/import()
const mod = await import(`file://${sourcePath.replace(/\\/g, '/')}`); - HIGH obfuscation cappyeo/discord-mcp dynamic require()/import()
const mod = await import(`file://${join(dir, file).replace(/\\/g, '/')}`); - HIGH dynamic exec antoinebou12/uml-mcp __import__()
return __import__(module_name) - HIGH dynamic exec sexylin/hipo-mcp pickle.loads()
return pickle.loads(raw) - HIGH obfuscation wheelerhubbell/WheelerHubbellPublishingStandingMark dynamic require()/import()
const open=(e,type,key)=>{require(e.protected.type===type,'wrong signed type');require(e.protected.key_id===sha(Buffer.from(key,'base64')),'signer key id');require(verify(null,Buffer.from(canonical({p - HIGH obfuscation wheelerhubbell/WheelerHubbellPublishingStandingMark base64 decode → exec sink
const open=(e,type,key)=>{require(e.protected.type===type,'wrong signed type');require(e.protected.key_id===sha(Buffer.from(key,'base64')),'signer key id');require(verify(null,Buffer.from(canonical({p - HIGH obfuscation wheelerhubbell/WheelerHubbellPublishingStandingMark dynamic require()/import()
for(const file of files){execFileSync(process.execPath,['--check','scripts/'+file],{stdio:'pipe'});await import('./'+file);}