Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51308 analyzed
7409 re-analysis due
996 not analyzable
0 not yet analyzed
4850 source gone
not analyzable
796 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12011
- obfuscation 3650
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190167
- HIGH committed secret bkuan001/halo-record Anthropic key
sk-ant…(33 chars, redacted) - MEDIUM suspicious endpoint bkuan001/halo-record discord.com
"https://discord.com/api/webhooks/1234567890/aBcDeFgHiJkLmNoPqRsTuVwXyZ0123456789", - HIGH committed secret bkuan001/halo-record private key
PEM private key block (redacted) - HIGH dynamic exec sandraschi/windows-computer-use-mcp __import__()
__import__(module_name) - HIGH dynamic exec sandraschi/windows-computer-use-mcp pickle.loads()
face_data = pickle.loads(data) - HIGH dynamic exec sandraschi/windows-computer-use-mcp pickle.loads()
face_data = pickle.loads(decrypted_data) - HIGH dynamic exec sandraschi/windows-computer-use-mcp __import__()
__import__(f"{__name__}.{module_name}", fromlist=["*"]) - HIGH dynamic exec sandraschi/windows-computer-use-mcp __import__()
mod = __import__(module_name, fromlist=[attr_name]) - MEDIUM suspicious endpoint 54yyyu/zotero-mcp 169.254.169.254 (cloud metadata)
zot, "ITEM1", "http://169.254.169.254/latest/meta-data/", "10.1/x", dummy_ctx) - HIGH dynamic exec 54yyyu/zotero-mcp eval()/exec()
desc_val = eval(desc_text, {"__builtins__": {}}, {}) - HIGH dynamic exec 54yyyu/zotero-mcp __import__()
module = __import__(f"zotero_mcp.{provider}_batch", fromlist=["_"]) - HIGH hidden prompt DROOdotFOO/raxol prompt-file: hidden-directive
ENTITY: subagent system prompt. Rules only; persona is never inherited (the bond is a main-thread property). Load directly for any dispatched task unit. Fill {{NAME}}. - HIGH hidden prompt DROOdotFOO/raxol prompt-file: hidden-directive
ENTITY: core system prompt (Layer 0), byte-stable, renders above the cache boundary. Load this directly. Fill the {{slots}} (see slots.md) before use. Raw prompt text: no blockquote markers, no ration - HIGH dynamic exec joinwell52-AI/FCoP eval()/exec()
exec(compile(code, "README.md Python example", "exec"), {}) - HIGH dynamic exec joinwell52-AI/FCoP eval()/exec()
exec(compile(code, "README.md Python example", "exec"), {})