aegis-trust

v0.9.2 safe
4.0
Medium Risk

AI agent data access control — control what agents can see

🤖 AI Analysis

Final verdict: SAFE

The package shows minimal risk signals with no detected shell execution, obfuscation, or credential harvesting patterns. However, the metadata risk due to low repository activity and lack of maintainer details slightly elevates the concern.

  • Low risk scores in network, shell, obfuscation, and credential checks.
  • Metadata risk due to low repository activity and lack of maintainer details.
Per-check LLM notes
  • Network: The observed network calls are likely for health checks and service interactions, which are common in many applications.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The repository's low activity and lack of maintainer details suggest potential risks, but no clear indicators of malicious intent.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

  • ne: self._httpx = httpx.Client( base_url=self._base_url, ve
  • self._async_httpx = httpx.AsyncClient( base_url=self._base_url, ve
  • try: resp = httpx.get( f"{self._base_url}/health",
  • e: self._client = httpx.Client( base_url=self._base_url, co
  • context manager for internal httpx.Client (see httpx docs)""" self.get_httpx_client().__exit__(
  • self._async_client = httpx.AsyncClient( base_url=self._base_url, co
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: aegisagentcontrol.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aegis-trust 
Create a mini-application called 'SecureDataExplorer' that allows users to securely explore and manage their data using AI agents. The application should use the Python package 'aegis-trust' to control what each AI agent can access based on user-defined policies. Here’s a step-by-step guide on what your application should achieve:

1. **User Registration and Login**: Implement a simple user registration and login system. Each user will have a unique profile where they define their data and set permissions.
2. **Data Management**: Users should be able to upload different types of data files (e.g., CSV, JSON, images). These files will be stored in a secure database.
3. **AI Agent Integration**: Integrate AI agents into the application. Each agent will perform specific tasks such as data analysis, image recognition, etc.
4. **Access Control with 'aegis-trust'**: Use the 'aegis-trust' package to define and enforce access controls for each AI agent. For example, an agent might only be allowed to view certain columns in a CSV file or process certain types of images.
5. **Dynamic Policy Setting**: Allow users to dynamically adjust the access policies for their data and AI agents through a user-friendly interface.
6. **Audit Logs**: Maintain audit logs of all access attempts and actions taken by the AI agents. This will help in monitoring and ensuring compliance with the defined policies.
7. **Visualization**: Provide visualizations of the data accessed and processed by the AI agents to give users insights into the performance and behavior of the agents.

Suggested Features:
- User roles and permissions management
- Real-time notifications for access requests and policy changes
- Detailed documentation and tutorials for setting up and managing the application

How 'aegis-trust' is Utilized:
- Define agent capabilities and limitations using 'aegis-trust'
- Apply these definitions to restrict the scope of each AI agent’s activities
- Monitor and log any violations of the defined policies to ensure data security and privacy