Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50100 analyzed
8073 re-analysis due
988 not analyzable
2 not yet analyzed
4804 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6180
- dynamic exec 11839
- obfuscation 3598
- suspicious endpoint 12356
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187701
- MEDIUM suspicious endpoint asap-protocol/asap-protocol 169.254.169.254 (cloud metadata)
assert is_safe_http_url("https://169.254.169.254/latest/meta-data/") is False - MEDIUM suspicious endpoint asap-protocol/asap-protocol 169.254.169.254 (cloud metadata)
fetch_manifest("http://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint asap-protocol/asap-protocol 169.254.169.254 (cloud metadata)
aggregate_mod.validate_site_endpoint("https://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint asap-protocol/asap-protocol 169.254.169.254 (cloud metadata)
headers={"Location": "http://169.254.169.254/latest/meta-data/"}, - HIGH committed secret asap-protocol/asap-protocol private key
PEM private key block (redacted) - MEDIUM suspicious endpoint ilyautov/consilium-principis t.me
assert seen["url"] == "https://t.me/s/myevilchannel" # host фиксирован, спецсимволы срезаны - HIGH dynamic exec ilyautov/consilium-principis __import__ sink
monkeypatch.setattr(mcp_server.subprocess if hasattr(mcp_server, "subprocess") else __import__("subprocess"), - MEDIUM suspicious endpoint ilyautov/consilium-principis t.me
return _cc_fetch(f"https://t.me/s/{canonical_handle}", timeout=timeout) - HIGH credential in log askturret/mcp credential in log
log.info('auth attempt', { password: 'hunter2', requestId: 'r-1' }); - HIGH obfuscation askturret/mcp dynamic require()/import()
const { main } = await import(${JSON.stringify(GUARD)}); - HIGH obfuscation askturret/mcp dynamic require()/import()
const { check: runCheck } = await import(${JSON.stringify(join(here, 'check-audit-append-only.mjs'))}); - MEDIUM over-broad oauth scope anaborne/gdrive-write-mcp https://www.googleapis.com/auth/drive
'https://www.googleapis.com/auth/drive scope rather than drive.file or a read-only scope.' - MEDIUM over-broad oauth scope anaborne/gdrive-write-mcp https://www.googleapis.com/auth/drive
export const DRIVE_SCOPE = 'https://www.googleapis.com/auth/drive'; - HIGH credential in log anaborne/gdrive-write-mcp credential in log
console.log(` GOOGLE_REFRESH_TOKEN=${tokens.refresh_token}\n`); - MEDIUM over-broad oauth scope anaborne/gdrive-write-mcp https://www.googleapis.com/auth/drive
const DRIVE_SCOPE = 'https://www.googleapis.com/auth/drive';