agent-data-residency-mcp

v1.0.3 suspicious
4.0
Medium Risk

Agent data residency + GDPR Chapter V transfer-basis runtime guard. Programmatically answer 'where does this data live?' for agent-to-agent transfers. Adequacy decisions, SCCs, BCRs, EU AI Act Article 10.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits low risks in terms of network, shell, and obfuscation activities, but the metadata suggests potential issues with the author's information and repository activity, raising concerns about its legitimacy.

  • Minimal author information
  • Inactive repository
Per-check LLM notes
  • Network: No network calls detected, which is normal if the package does not require external communications.
  • Shell: No shell execution patterns detected, indicating no immediate signs of executing system commands.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious activity.
  • Credentials: No credential harvesting patterns detected, suggesting safe handling of sensitive information.
  • Metadata: The package shows some red flags, such as an author with minimal information and an inactive repository, but there's no clear evidence of typosquatting or malicious intent.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: meok.ai>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-data-residency-mcp 
Develop a privacy compliance tool named 'DataGuard' using Python that leverages the 'agent-data-residency-mcp' package to ensure GDPR compliance during data transfers between agents. The application should perform the following functions:

1. **User Interface**: Design a simple yet intuitive user interface where users can input details of data transfers, including source agent, destination agent, type of data being transferred, and purpose of transfer.
2. **Compliance Check**: Utilize the 'agent-data-residency-mcp' package to programmatically verify if the data transfer complies with GDPR Chapter V transfer-basis requirements. This includes checking adequacy decisions, standard contractual clauses (SCCs), binding corporate rules (BCRs), and EU AI Act Article 10 compliance.
3. **Audit Log**: Implement a feature to log all compliance checks performed by the application, storing information such as timestamp, agents involved, data type, and compliance status.
4. **Reporting**: Develop a reporting module that generates detailed reports on compliance checks, highlighting any non-compliant transfers and suggesting necessary actions to rectify them.
5. **Notification System**: Integrate a notification system that alerts administrators via email or SMS when a data transfer is found to be non-compliant.

The 'agent-data-residency-mcp' package will be crucial in performing the compliance checks, ensuring that the application adheres to GDPR guidelines for data residency and transfer. Your task is to create a fully functional mini-app that not only verifies compliance but also aids organizations in maintaining a robust data governance framework.