Code analysis
static source read inferred
Static code-analysis findings — hidden prompt content in shipped skill files, committed secrets, dynamic-exec sinks, and suspicious call-home endpoints — across the analyzed catalogue. Heuristic, pure, no code executed; every row deep-links to its source. Click a kind to filter.
50066 analyzed
8097 re-analysis due
988 not analyzable
0 not yet analyzed
4803 source gone
not analyzable
789 too large 199 no source
Running analyzer v33. The scanner changelog explains what each version detects and when it changed.
- hidden prompt 338
- committed secret 6178
- dynamic exec 11834
- obfuscation 3579
- suspicious endpoint 12346
- credential in log 713
- over-broad oauth scope 2550
- suspicious skill script 185
- bundled IDE extension 49
- skill file 187628
- MEDIUM suspicious endpoint infimium-ai/infimium-agent us.i.posthog.com (telemetry)
const DEFAULT_POSTHOG_ENDPOINT = "https://us.i.posthog.com/capture/"; - HIGH dynamic exec clockworksquirrel/handsfree-bridge eval()/exec()
exec(compile(ast.Module(body=functions, type_ignores=[]), "gateway-policy-only", "exec"), namespace) - HIGH dynamic exec Fortemi/fortemi new Function()
tools = new Function('path', 'return ' + arrayLiteral)(path); - HIGH dynamic exec Fortemi/fortemi eval()
tools = eval(`(function() { return ${bracketContent.replace(/;\s*$/, "")} })()`); - HIGH dynamic exec Fortemi/fortemi eval()
tools = eval(`(function() { return ${bracketContent.replace(/;\s*$/, "")} })()`); - MEDIUM suspicious endpoint cometchat/docs-mcp us.i.posthog.com (telemetry)
const host = envVar("POSTHOG_HOST") ?? "https://us.i.posthog.com"; - HIGH committed secret sachinshelke/codevira Anthropic key
sk-ant…(61 chars, redacted) - HIGH dynamic exec sachinshelke/codevira __import__()
lambda: __import__( - HIGH dynamic exec sachinshelke/codevira __import__()
__import__(_pkg) - MEDIUM suspicious endpoint augbastos/wavr api.telegram.org
API_BASE = "https://api.telegram.org" - MEDIUM suspicious endpoint augbastos/wavr 8.8.8.8
assert _is_lan_location("http://8.8.8.8/desc.xml") is False - MEDIUM suspicious endpoint augbastos/wavr 8.8.8.8
"https://8.8.8.8:8000", # public - MEDIUM suspicious endpoint augbastos/wavr 169.254.169.254 (cloud metadata)
"https://169.254.169.254:8000", # cloud metadata / link-local - HIGH dynamic exec augbastos/wavr __import__ sink
for key in [k for k in __import__("os").environ if k.startswith("WAVR_")]: - MEDIUM suspicious endpoint augbastos/wavr 169.254.169.254 (cloud metadata)
assert _xaddr_ok("http://169.254.169.254/latest/meta-data/") is False