Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
51193 analyzed
7507 re-analysis due
995 not analyzable
0 not yet analyzed
4848 source gone
not analyzable
795 too large 200 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 369
- committed secret 6298
- dynamic exec 12007
- obfuscation 3647
- suspicious endpoint 12542
- credential in log 718
- over-broad oauth scope 2556
- suspicious skill script 197
- bundled IDE extension 50
- skill file 190152
- HIGH dynamic exec nagarjuna-tella/Aksara eval()/exec()
exec(compile(code, str(page), 'exec'), namespace) # noqa: S102 - HIGH dynamic exec nagarjuna-tella/Aksara eval()/exec()
exec(compile(source, 'ai_debug_example.py', 'exec'), namespace) # noqa: S102 - trusted repository example - HIGH dynamic exec nagarjuna-tella/Aksara eval()/exec()
exec(compile(code, 'post_actions.py', 'exec'), namespace) # noqa: S102 - HIGH dynamic exec nagarjuna-tella/Aksara __import__()
__import__(path) - HIGH dynamic exec temiroff/Blacknode eval()/exec()
exec(code, namespace) - HIGH dynamic exec temiroff/Blacknode eval()/exec()
exec( - HIGH dynamic exec temiroff/Blacknode __import__ sink
own = __import__("os").getpid() - HIGH dynamic exec temiroff/Blacknode eval()/exec()
exec(run_app_source, run_app_namespace) - MEDIUM suspicious endpoint temiroff/Blacknode api.telegram.org
return _post_json(f"https://api.telegram.org/bot{token}/sendMessage", payload) - HIGH dynamic exec temiroff/Blacknode eval()/exec()
exec(compile(code, "<PythonFn>", "exec"), {"__builtins__": __builtins__}, local_ns) - MEDIUM suspicious endpoint temiroff/Blacknode api.telegram.org
with _ur.urlopen(f"https://api.telegram.org/bot{bot_token}/getMe", timeout=8) as r: - HIGH dynamic exec temiroff/Blacknode eval()/exec()
exec(compile(req.code, "<custom>", "exec"), globs) - MEDIUM suspicious endpoint up2itnow0822/agentpay-mcp 192.175.48.1
'https://192.175.48.1/kill', - MEDIUM suspicious endpoint up2itnow0822/agentpay-mcp 192.52.193.1
'https://192.52.193.1/kill', - MEDIUM suspicious endpoint up2itnow0822/agentpay-mcp 192.31.196.1
'https://192.31.196.1/kill',