Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- MEDIUM over-broad oauth scope @google-cloud/observability-mcp https://www.googleapis.com/auth/cloud-platform
scopes: "https://www.googleapis.com/auth/cloud-platform" - HIGH dynamic exec @google-cloud/observability-mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec exa-mcp-server new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH obfuscation critical dynamic require()/import()
return await import(`@modelcontextprotocol/sdk/${subpath}`); - HIGH dynamic exec @google-cloud/storage-mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - MEDIUM suspicious endpoint mcp-use eu.i.posthog.com (telemetry)
var EVENT="mcp_use_sdk_event",ENDPOINT="https://eu.i.posthog.com/i/v0/e/",TOKEN="phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI",CONTENT=/(^|_)(arguments?|args|body|command|headers?|location|message| - HIGH dynamic exec mcp-use new Function()
sourceCode,sch));let validate=new Function(`${names_1.default.self}`,`${names_1.default.scope}`,sourceCode)(this,this.scope.get());if(this.scope.value(validateName,{ref:validate}),validate.errors=null - MEDIUM suspicious endpoint mcp-use eu.i.posthog.com (telemetry)
var EVENT="mcp_use_sdk_event",ENDPOINT="https://eu.i.posthog.com/i/v0/e/",TOKEN="phc_lyTtbYwvkdSbrcMQNPiKiiRWrrM1seyKIMjycSvItEI",CONTENT=/(^|_)(arguments?|args|body|command|headers?|location|message| - HIGH dynamic exec @launchdarkly/mcp-server new Function()
var deprecatedfn = new Function("fn", "log", "deprecate", "message", "site", `"use strict" - MEDIUM suspicious endpoint agent-afk api.telegram.org
c=m(()=>{"use strict";sm();fe();P();U1="https://api.telegram.org"});function B1(t=Hs){return async(e,n)=>{if(!e||typeof e!="object")return{content:"Invalid input: expected an object",isError:!0};let r - MEDIUM suspicious endpoint agent-afk api.telegram.org
=y(()=>{"use strict";Hf();QP();F();Oxe="https://api.telegram.org"});function $xe(e=Ou){return async(t,n)=>{if(!t||typeof t!="object")return{content:"Invalid input: expected an object",isError:!0};let - HIGH dynamic exec agentic-flow new Function()
const ret = new Function(getStringFromWasm0(arg0, arg1)); - MEDIUM suspicious endpoint figma-developer-mcp us.i.posthog.com (telemetry)
LsUHU4TGGpgAiscm8nhjudHgAJzAdzXkJV",lt="https://us.i.posthog.com",M,te,oe,N=!0,re=!1,Ie=[],Fe=new nt;function ne(e,t){let o=e.filter(Boolean);return o.length===0?t():Fe.run(o,t)}function mt(e){return - HIGH dynamic exec @serdnaley/metabase-mcp new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode); - HIGH dynamic exec @hasna/conversations new Function()
const makeValidate = new Function(`${names_1.default.self}`, `${names_1.default.scope}`, sourceCode);