Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50020 analyzed
8131 re-analysis due
988 not analyzable
1 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6177
- dynamic exec 11826
- obfuscation 3575
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2548
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187620
- HIGH dynamic exec homeassistant-ai/ha-mcp __import__()
module = __import__(module_name, fromlist=["__file__"]) - HIGH dynamic exec homeassistant-ai/ha-mcp eval()/exec()
exec(expr, safe_globals, safe_locals) - HIGH dynamic exec homeassistant-ai/ha-mcp __import__()
__import__(module_name) - MEDIUM suspicious endpoint brcampidelli/chimera-agent discord.com
("https://discord.com/api/webhooks/1234567890/aBcDeF-gH1jKlMnOpQrStUvW", - HIGH committed secret brcampidelli/chimera-agent OpenAI key
sk-pro…(30 chars, redacted) - HIGH committed secret brcampidelli/chimera-agent OpenAI key
sk-pro…(30 chars, redacted) - MEDIUM suspicious endpoint brcampidelli/chimera-agent 93.184.216.34
assert is_safe_url("https://93.184.216.34/") is True # example.com's IP - MEDIUM suspicious endpoint brcampidelli/chimera-agent 8.8.8.8
check_url("http://8.8.8.8/") # public IP, does not raise - MEDIUM suspicious endpoint brcampidelli/chimera-agent 169.254.169.254 (cloud metadata)
"http://169.254.169.254/latest/meta-data/", # cloud metadata - HIGH dynamic exec brcampidelli/chimera-agent __import__ sink
"PATH": __import__("os").environ.get("PATH", ""), - HIGH committed secret brcampidelli/chimera-agent OpenAI key
sk-pro…(30 chars, redacted) - MEDIUM suspicious endpoint brcampidelli/chimera-agent 169.254.169.254 (cloud metadata)
out = HttpGetTool().run(url="http://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint brcampidelli/chimera-agent 169.254.169.254 (cloud metadata)
out = DownloadMediaTool(tmp_path).run(url="http://169.254.169.254/latest/meta-data/") - MEDIUM suspicious endpoint brcampidelli/chimera-agent discord.com
assert payload_for("https://discord.com/api/webhooks/1/x", "oi") == {"content": "oi"} - MEDIUM suspicious endpoint brcampidelli/chimera-agent 169.254.169.254 (cloud metadata)
out = tool.run(action="screenshot", url="http://169.254.169.254/latest/", path="shot.png")