QzAgent

v1.1.11b1 safe
4.0
Medium Risk

QzAgent is a **personal assistant** that runs in your own environment. It talks to you over multiple channels (DingTalk, Feishu, QQ, Discord, iMessage, etc.) and runs scheduled tasks according to your configuration. **What it can do is driven by Skills — the possibilities are open-ended.** Built-in skills include cron, PDF/Office handling, news digest, file reading, and more; you can add custom skills. All data and tasks run on your machine; no third-party hosting.

🤖 AI Analysis

Final verdict: SAFE

The package shows minimal risk indicators with no network calls, shell executions, or obfuscations detected. However, the low maintainer activity and poor metadata quality slightly elevate the risk score.

  • Low network and shell risk
  • Poor metadata quality
  • Minimal obfuscation risk
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package's functionality requires external communication.
  • Shell: No shell execution detected, reducing the risk of command injection or system compromise.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows signs of low maintainer activity and poor metadata quality, which could indicate potential risks but not necessarily malicious intent.

🔬 Heuristic Checks

Outbound Network Calls

No suspicious network call patterns found

Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

No author email provided

Suspicious Page Links score 10.0

Found 5 suspicious link(s) on the package page

  • Non-HTTPS external link: http://127.0.0.1:8888/
  • Non-HTTPS external link: http://127.0.0.1:8888/api/console/chat
  • Non-HTTPS external link: http://127.0.0.1:8088/**
  • Non-HTTPS external link: http://host.docker.internal:
  • Non-HTTPS external link: http://host.docker.internal:1234/v1`
Git Repository History

No GitHub repository linked

  • No GitHub repository link found
Maintainer History score 6.0

3 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with QzAgent
Your task is to develop a personalized daily routine manager using the Python package 'QzAgent'. This application will help users manage their daily tasks, receive notifications, and interact through various messaging platforms like DingTalk, Feishu, QQ, Discord, and iMessage. Here’s a detailed plan for building this app:

1. **Setup QzAgent**: Begin by installing QzAgent in your local environment. Ensure you have the necessary dependencies installed as per the documentation.
2. **Configuration**: Set up configurations for QzAgent to connect to your preferred messaging platform(s). This involves setting up API keys, user IDs, and any other required credentials.
3. **Daily Task Management**: Implement a feature where users can input their daily tasks. Use QzAgent's built-in cron skill to schedule reminders for these tasks at specified times.
4. **Notifications**: Utilize QzAgent to send notifications about upcoming tasks directly to the user via their chosen messaging platform. Notifications should be customizable in terms of timing and content.
5. **Custom Skills**: Develop custom skills for QzAgent that allow users to ask for updates on their tasks, mark tasks as completed, or add new tasks on the fly. These interactions should be seamless across all connected messaging platforms.
6. **Data Privacy**: Since QzAgent ensures all data and tasks run locally, ensure that your application adheres strictly to privacy guidelines. No user data should be stored outside of the user's local machine.
7. **User Interface**: Although QzAgent itself does not provide a UI, consider integrating a simple command-line interface or a web-based UI for managing tasks and configuring settings.
8. **Testing**: Thoroughly test the application to ensure that notifications are sent correctly, tasks are managed efficiently, and user interactions work smoothly across different messaging platforms.
9. **Documentation**: Provide comprehensive documentation detailing how to set up and use the application, including how to install QzAgent, configure messaging platforms, and manage tasks effectively.

By following these steps, you'll create a powerful tool that helps users stay organized and productive, all while keeping their data secure and local.