aegis-stack

v0.6.13 suspicious
6.0
Medium Risk

A production-ready FastAPI platform with modular components and a built-in control plane. Try: uvx aegis-stack init my-project

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits elevated risks due to potential misuse of network and shell functionalities, though there's no direct evidence of malicious intent. The incomplete metadata adds to the uncertainty.

  • High shell risk
  • Moderate network risk
  • Incomplete metadata
Per-check LLM notes
  • Network: Network calls may be legitimate if the package is designed to interact with APIs, but require further investigation into the purpose and destination of these requests.
  • Shell: Executing shell commands, especially over SSH, poses significant risks if not properly controlled and documented. This could indicate remote command execution capabilities which might be used for malicious purposes.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
  • Credentials: No credential harvesting patterns detected, suggesting no risk of secret theft.
  • Metadata: Low risk but author details are incomplete and the maintainer seems new or inactive.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • =100" try: req = urllib.request.Request( api_url, headers={
  • }, ) with urllib.request.urlopen(req, timeout=10) as response: data = jso
  • ead}" try: req = urllib.request.Request( api_url, headers={
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • server via SSH.""" return subprocess.run(["ssh", f"{user}@{host}", command]) def _run_remote_captur
  • capture output.""" return subprocess.run( ["ssh", f"{user}@{host}", command], capture_output=
  • .checking_ssh")) result = subprocess.run( [ "ssh", "-o",
  • keyscan_result = subprocess.run( ["ssh-keyscan", "-H", host],
  • ng_script")) scp_result = subprocess.run( ["scp", str(setup_script), f"{user}@{host}:/tmp/ser
  • ing_setup")) ssh_result = subprocess.run( [ "ssh", f"{user}@{host}",
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository lbedner/aegis-stack appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aegis-stack 
Create a fully-functional mini-app using the 'aegis-stack' Python package, which is designed to streamline the development of production-ready FastAPI applications. Your task is to build a simple yet powerful blog post management system. This system should allow users to create, read, update, and delete blog posts. Additionally, it should support user authentication via JWT tokens to ensure that only authenticated users can perform certain actions such as editing or deleting their own posts.

### Key Features:
1. **User Authentication:** Implement JWT-based authentication where users can register, login, and logout.
2. **CRUD Operations on Blog Posts:** Users should be able to create new blog posts, view all existing posts, edit their own posts, and delete their own posts.
3. **Role-Based Access Control (RBAC):** Define roles like 'admin' and 'user'. Admins should have full access to all CRUD operations on any post, while regular users can only manage their own posts.
4. **Database Integration:** Use a PostgreSQL database to store user information and blog posts.
5. **Documentation:** Ensure your API endpoints are well-documented using Swagger/OpenAPI.
6. **Error Handling:** Implement proper error handling to provide meaningful feedback when errors occur.

### Utilizing 'aegis-stack':
- Initialize your project using the command `uvx aegis-stack init my-blog-app`.
- Leverage the built-in control plane provided by 'aegis-stack' to easily configure and manage your application's settings.
- Use 'aegis-stack' modular components to quickly set up the required functionalities without reinventing the wheel.
- Take advantage of the FastAPI framework integrated within 'aegis-stack' to develop RESTful APIs efficiently.
- Explore additional modules or plugins available in 'aegis-stack' to enhance your application's security, performance, or functionality as needed.