affixly-surge-sdk

v0.5.0 suspicious
4.0
Medium Risk

Lightweight cost-attribution wrapper for Anthropic, OpenAI, and Google Gemini Python SDKs

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of potential misuse due to its metadata issues and custom redirect handler. While direct malicious activities are not evident, further investigation is warranted.

  • Missing repository link
  • Short and potentially unverified author name
  • Custom redirect handler with unclear documentation
Per-check LLM notes
  • Network: The package appears to make network calls to an API endpoint, which is common for SDKs. However, the custom redirect handler could be a concern if not properly documented.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The missing repository and short author name raise concerns about the legitimacy of the package.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 6.0

Found 4 network call pattern(s)

  • est class _NoRedirectHandler(urllib.request.HTTPRedirectHandler): def redirect_request(self, req, fp
  • mostly for clarity. _opener = urllib.request.build_opener( urllib.request.HTTPSHandler(context=ssl.cr
  • lib.request.build_opener( urllib.request.HTTPSHandler(context=ssl.create_default_context()), _NoR
  • _api_key}" req = urllib.request.Request( f"{cfg.surge_api_url.rstrip('/')}/a
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: greenpaths.io>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with affixly-surge-sdk 
Create a comprehensive cost-tracking tool for developers using the 'affixly-surge-sdk' package. This tool will help users monitor and attribute costs associated with their interactions with popular AI models from Anthropic, OpenAI, and Google Gemini. Here’s a detailed plan for building this mini-application:

1. **Project Setup**: Start by setting up your development environment with Python installed. Create a new virtual environment and install the necessary packages including 'affixly-surge-sdk'. Also, ensure you have API keys from Anthropic, OpenAI, and Google Gemini to authenticate your requests.

2. **Core Functionality**: Develop functions within your application that allow users to send queries to any of the supported AI models. Utilize 'affixly-surge-sdk' to automatically track and log the cost incurred for each request. Ensure these costs are attributed correctly based on the model used.

3. **User Interface**: Design a simple yet intuitive user interface where users can input their query and select which AI model they wish to use. Include options for viewing past transactions and their costs.

4. **Cost Reporting**: Implement a feature that generates detailed reports on the total cost of using the AI models over a specific period. Users should be able to filter these reports by date, model type, etc.

5. **Integration and Testing**: Test your application thoroughly to ensure it accurately tracks costs and displays them correctly. Integrate feedback loops to improve the accuracy and reliability of the cost attribution.

6. **Deployment**: Once your application is fully functional and tested, deploy it to a platform like Heroku or AWS so that others can easily access and use it.

**Suggested Features**:
- Real-time cost tracking during interactions with AI models.
- Historical cost analysis with customizable filters.
- Integration with third-party accounting tools for seamless expense management.
- Alerts for when spending exceeds a certain threshold.
- Support for multiple user accounts, allowing teams to track individual contributions to overall costs.

By leveraging the 'affixly-surge-sdk', you'll be able to streamline the process of attributing costs to specific AI model interactions, making it easier for developers to manage their expenses efficiently.