AI Analysis
Final verdict: SUSPICIOUS
The package shows minimal risk in terms of network calls, shell execution, obfuscation, and credential handling. However, the metadata risk score is elevated due to the lack of detailed information and the absence of an associated GitHub repository.
- Metadata risk is high due to limited package information and no GitHub repo.
- Package is newly created which raises some suspicion.
Per-check LLM notes
- Network: No network calls detected, which is normal if the package does not require external services.
- Shell: No shell execution patterns detected, indicating the package likely does not execute system commands.
- Obfuscation: No obfuscation patterns detected, indicating low risk.
- Credentials: No credential harvesting patterns detected, indicating low risk.
- Metadata: The package is newly created with limited information and no associated GitHub repository, raising suspicion.
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
No author email provided
Suspicious Page Links
All external links appear legitimate
Git Repository History
No GitHub repository linked
No GitHub repository link found
Maintainer History
score 10.0
5 maintainer concern(s) found
Only one version has ever been released — brand new packagePackage uploaded less than 24 hours ago (2026-06-05T09:43:41.000Z)Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
AI App Starter Prompt
Use this prompt to build a project with agent-catalog-cli
Create a Python-based command-line tool named 'SkillSelector' that leverages the 'agent-catalog-cli' package to manage AI assistant skills, rules, and subagents efficiently. This tool should allow users to scan a directory for available AI components and selectively move them to another designated directory, which represents an AI assistant's workspace. Here’s a detailed breakdown of the functionalities and steps involved: 1. **Initialization**: Upon launching the application, it should initialize the 'agent-catalog-cli' package to prepare for scanning operations. 2. **Directory Scanning**: Users should be able to specify a source directory containing various AI components such as skills, rules, and subagents. The tool will use 'agent-catalog-cli' to scan this directory and list all available items. 3. **Component Selection**: After listing the available components, the user should have the option to select one or multiple items to move. This selection process could be facilitated through a simple menu-driven interface. 4. **Destination Directory**: The user must specify a destination directory where the selected components will be moved. This destination directory represents the target AI assistant's workspace. 5. **Moving Components**: Once the user confirms their selections and the destination directory, the tool should use 'agent-catalog-cli' to copy the selected components into the specified destination directory, maintaining the original folder structure. 6. **Confirmation and Feedback**: After moving the components, the tool should provide feedback on which items were successfully moved and any errors encountered during the process. **Suggested Features**: - User-friendly command-line interface for easy navigation. - Option to filter components based on specific criteria (e.g., type of component). - Batch-moving capability to streamline the process for managing multiple components at once. - Detailed logging of all actions performed for auditing purposes. - Error handling to manage issues such as missing files or incorrect permissions gracefully. By building 'SkillSelector', you'll create a valuable utility for anyone working with AI assistants, providing a straightforward way to organize and manage their AI components.