achek-sdk

v1.0.2 suspicious
4.0
Medium Risk

Official Python SDK for Achek — WhatsApp OTP, AI chatbots & business messaging for Nigeria

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has low risks in terms of network, shell, obfuscation, and credential handling, but its metadata suggests it may be newly created with limited maintainer history, raising suspicion about its authenticity and potential for supply-chain attacks.

  • Low risk in network, shell, obfuscation, and credential handling.
  • Metadata risk due to new package creation and minimal maintainer history.
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package is expected to communicate with external services.
  • Shell: No shell execution patterns detected, indicating no direct system command execution risk.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows signs of being newly created with minimal maintainer history, which raises suspicion.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: achek.com.ng>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with achek-sdk 
Create a WhatsApp-based customer service chatbot using the 'achek-sdk' Python package. This chatbot will serve as a bridge between a business and its customers, providing automated responses to common inquiries, handling customer complaints, and facilitating two-way communication. Here’s a detailed breakdown of the project steps and features:

1. **Setup**: Install the 'achek-sdk' package and configure it with your Achek API credentials.
2. **Core Functionality**: Implement basic functionalities such as sending and receiving messages via WhatsApp.
3. **Automated Responses**: Set up predefined responses for common customer queries related to product information, order status, and FAQs.
4. **Two-Way Communication**: Enable the chatbot to engage in conversations by asking follow-up questions based on initial customer inputs.
5. **OTP Verification**: Integrate the One-Time Password (OTP) verification feature to ensure secure interactions.
6. **AI Integration**: Use the AI chatbot capabilities provided by Achek to handle more complex queries and provide personalized responses.
7. **Feedback Collection**: Allow customers to leave feedback after their interaction, which can be collected and analyzed for improving services.
8. **Analytics Dashboard**: Develop a simple dashboard within the chatbot to track key metrics like response times, customer satisfaction levels, and frequently asked questions.
9. **Testing and Deployment**: Thoroughly test all functionalities before deploying the chatbot to a live environment.

The goal is to create a seamless, efficient, and user-friendly communication channel that enhances customer experience and supports business operations.