aegis-harness

v0.15.1 suspicious
6.0
Medium Risk

A multi-agent meta-harness for coding agents — drives Claude Code, Gemini CLI, and OpenCode in one calm full-screen TUI.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risks due to its shell execution patterns and metadata issues, though no direct evidence of malicious intent is found.

  • High shell risk due to potential system modifications.
  • Metadata contains suspicious non-HTTPS links and lacks maintainer information.
Per-check LLM notes
  • Network: The network calls could be legitimate for package updates or communications but require further investigation to confirm their purpose and destination.
  • Shell: The shell execution patterns are concerning as they involve executing external commands which can modify the system. This requires scrutiny to ensure it's not being used maliciously.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
  • Credentials: No credential harvesting patterns detected, suggesting no risk of secret theft.
  • Metadata: Suspicious non-HTTPS link and lack of maintainer information suggest potential risks.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • try: with socket.create_connection( (self.host, self.port), timeout=0.2
  • aise.""" try: r = httpx.get(url, timeout=HTTP_TIMEOUT, follow_red
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 6.0

Found 3 shell execution pattern(s)

  • l.ref, subpath] archive = subprocess.run(archive_cmd, capture_output=True, check=False) if archiv
  • e=plugin_name, into=into) subprocess.run( ["tar", "-x", "-C", str(into)], input=archive.stdou
  • one_dir = into / "_clone" subprocess.run( ["git", "clone", "--depth=1", f"--branch={url.ref}"
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: apiad.net>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://100.64.0.5:8556
✓ Git Repository History

Repository apiad/aegis appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aegis-harness 
Create a fully-functional mini-application called 'AgentCommander' that integrates the capabilities of the 'aegis-harness' package to manage and interact with multiple coding agents like Claude Code, Gemini CLI, and OpenCode in a unified, user-friendly interface. Your task is to develop a command-line tool that allows users to control these agents through a simple yet powerful Text User Interface (TUI). Here are the steps and features you need to implement:

1. **Setup**: Begin by installing the necessary dependencies including 'aegis-harness'. Ensure your application is Python 3.x compatible.
2. **Initialization**: Develop a startup routine that initializes the TUI interface and loads the available coding agents into memory.
3. **Agent Management**: Implement functionalities to add, remove, and switch between different coding agents seamlessly within the TUI.
4. **Command Execution**: Allow users to execute commands through the selected agent(s), such as running code snippets or performing specific tasks. The output from these commands should be displayed back to the user in a readable format.
5. **Configuration Settings**: Provide options for users to customize their experience, such as setting default agents, preferred coding environments, or adjusting display settings.
6. **Help and Documentation**: Include a help menu within the TUI that provides quick access to documentation and usage instructions for each feature.
7. **Error Handling**: Ensure robust error handling mechanisms are in place to gracefully handle any issues that may arise during execution, providing clear feedback to the user.
8. **Testing and Validation**: Write unit tests for critical functions and validate the application works as expected across various scenarios.

Your application should leverage 'aegis-harness' to streamline the interaction process, making it easier for developers to utilize multiple coding agents without needing to switch contexts manually. Additionally, focus on creating an intuitive and responsive TUI design that enhances user engagement and productivity.