Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50108 analyzed
8067 re-analysis due
988 not analyzable
0 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187702
- HIGH obfuscation glatinone/mcp-local-to-hosted-deployment-fix dynamic require()/import()
const root=new URL('../',import.meta.url).pathname; const {issueToken,validateToken,expireToken}=await import(root+'src/auth.ts'); const {validateArgs,approvalMatches}=await import(root+'src/policy.ts - HIGH obfuscation glatinone/mcp-local-to-hosted-deployment-fix dynamic require()/import()
const root=new URL('../',import.meta.url).pathname; const {issueToken,validateToken,expireToken}=await import(root+'runtime/auth.mjs'); const {validateArgs,approvalMatches}=await import(root+'runtime/ - HIGH obfuscation glatinone/mcp-local-to-hosted-deployment-fix dynamic require()/import()
const { issueToken, expireToken } = await import(root + 'runtime/auth.mjs'); - MEDIUM suspicious endpoint dambuchs/redact-pdf-mcp 169.254.169.254 (cloud metadata)
arguments: { file_url: 'http://169.254.169.254/latest/meta-data/' }, - MEDIUM suspicious endpoint dambuchs/redact-pdf-mcp 169.254.169.254 (cloud metadata)
const error = await rejection(assertPublicUrl(new URL('http://169.254.169.254/'), publicDns)); - HIGH dynamic exec ancilis/ancilis __import__()
__import__( - HIGH dynamic exec ancilis/ancilis __import__ sink
env={"HOME": str(home), "PATH": __import__("os").environ.get("PATH", "")}, - MEDIUM suspicious endpoint ancilis/ancilis docs.sentry.io (telemetry)
"spec_url": "https://docs.sentry.io/api/events/", - HIGH dynamic exec dengyier/OpenWorkProof eval()/exec()
exec(compile(source, name, "exec"), module.__dict__) # noqa: S102 - HIGH dynamic exec dengyier/OpenWorkProof eval()/exec()
exec(compile(source, name, "exec"), module.__dict__) - HIGH dynamic exec 1clawAI/browser-bridge eval()
await this.#eval(sessionId, `document.querySelector(${JSON.stringify(grant.passwordSelector)})?.form?.submit()`); - HIGH dynamic exec 1clawAI/browser-bridge eval()
const focused = await this.#eval( - HIGH dynamic exec 1clawAI/browser-bridge eval()
const v = await this.#eval(sessionId, read); - HIGH committed secret Rorogogogo/nomoreide GitHub fine-grained PAT
github…(38 chars, redacted) - HIGH dynamic exec tianyilt/qzcli_tool __import__()
__import__(mod)