adif-mcp

v1.1.0 suspicious
4.0
Medium Risk

ADIF MCP server — spec parsing, validation, and field enumeration tools

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has moderate risks associated with network and shell interactions, which while not inherently malicious, warrant further investigation due to the lack of detailed author metadata.

  • moderate network interaction risk
  • shell interaction via os.system
  • sparse and potentially new/inactive author metadata
Per-check LLM notes
  • Network: The detected network call patterns indicate the package may perform GET requests, which could be legitimate but should be reviewed to ensure no unauthorized data is being sent.
  • Shell: The use of os.system for clearing the console suggests the package interacts with the terminal, possibly for user interface purposes, which is generally benign but should be checked for proper usage.
  • Obfuscation: The absence of eval() and exec() functions suggests that the package is not using them to decode strings or execute code dynamically, which is a common technique in malicious scripts.
  • Credentials: No patterns indicative of credential harvesting have been detected.
  • Metadata: The author's information is sparse and the account seems new or inactive, raising some suspicion but not conclusive evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • ?{q}" if q else url req = urllib.request.Request(full, headers=headers, method="GET") with urllib
  • aders, method="GET") with urllib.request.urlopen(req, timeout=timeout) as resp: data = resp.r
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • est_no_eval_exec(): """No eval() or exec() in source.""" for path in _all_py_sources():
⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

  • minal for readability.""" os.system("cls" if os.name == "nt" else "clear") # ---- CLI --------
  • ss(): """No subprocess or shell=True usage.""" pattern = re.compile(r'\bsubprocess\b|shell\s
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: yahoo.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository qso-graph/adif-mcp appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with adif-mcp 
Create a Python-based mini-application called 'ADIF Validator' which serves as a powerful tool for Amateur Radio enthusiasts to validate their ADIF (Amateur Data Interchange Format) files. This application will leverage the 'adif-mcp' package to parse, validate, and enumerate fields within ADIF files, ensuring they adhere to the ADIF specification.

The application should include the following features:
1. **File Upload Interface**: Users should be able to upload their ADIF files through a simple graphical user interface (GUI).
2. **Validation Engine**: Utilize 'adif-mcp' to automatically parse the uploaded file, check each record against the ADIF specification, and highlight any discrepancies or errors found.
3. **Field Enumeration**: Provide a summary of all fields present in the ADIF file, including counts of occurrences for each field, and identify any non-standard fields.
4. **Detailed Report Generation**: Generate a comprehensive report detailing the validation results, including error descriptions, field summaries, and suggestions for correction.
5. **User-Friendly Interface**: Ensure the GUI is intuitive and easy to navigate, with clear instructions and feedback messages.
6. **Integration with Online Resources**: Optionally, allow users to directly link to relevant sections of the ADIF specification documentation from within the application for quick reference.

Steps to Build the Application:
1. Set up a Python environment with necessary packages installed, including 'adif-mcp'.
2. Design the GUI using a framework like PyQt or Tkinter.
3. Implement the file upload functionality, ensuring proper handling of different file formats.
4. Integrate 'adif-mcp' for parsing and validating ADIF files. Use its capabilities to perform field enumeration and generate detailed reports.
5. Develop the reporting mechanism to display results clearly and concisely.
6. Add optional integration with online resources for additional user support.
7. Test the application thoroughly to ensure robustness and usability.
8. Deploy the application either as a standalone executable or web-based service.