agent-elves

v0.1.4 suspicious
6.0
Medium Risk

ASCII art office animation plugin for Claude Code — watch your AI agents work in a tmux pane

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant network and shell execution risks, suggesting potential unauthorized data collection and manipulation of user environments. While there's no concrete evidence of malicious intent, the combination of these risks raises concerns about its safety.

  • High network risk
  • High shell risk
Per-check LLM notes
  • Network: The package makes external network calls that could be used to track the IP location of users, which is unusual and may indicate unauthorized data collection.
  • Shell: The package executes shell commands including Git and tmux, which can manipulate system configurations and terminal sessions, potentially indicating control over user environments or unintended functionality.
  • Obfuscation: The observed patterns suggest potential obfuscation techniques that could be used to hide code behavior, but they do not clearly indicate malicious intent.
  • Credentials: No clear evidence of credential harvesting or secret theft is present in the provided code snippets.
  • Metadata: The maintainer has only one package and the repository is not found, raising some suspicion but not conclusive evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • ) resp = urllib.request.urlopen(url, timeout=3) data = json.loads(resp.r
  • try: resp = urllib.request.urlopen( "http://ip-api.com/json/?fields=lat
⚠ Code Obfuscation score 6.0

Found 3 obfuscation pattern(s)

  • field(default_factory=lambda: __import__("time").monotonic()) # Office level at session start — latched
  • default_factory=lambda: __import__("time").time(), repr=False ) # Achievement system _ach
  • -------- CUSTOM_THEME_PATH = __import__("os").path.expanduser( "~/.config/agent-elves/custom-theme.js
⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • ass try: result = subprocess.run( ["git", "config", "user.name"], cap
  • deadline: check = subprocess.run( ["tmux", "list-panes", "-a", "-F", "#{pane_
  • ce kill this pane subprocess.run( ["tmux", "kill-pane", "-t", pane_id],
  • l interpolation) result = subprocess.run( [ "tmux", "split-window", "
  • if pane_id: subprocess.run( ["tmux", "kill-pane", "-t", pane_id],
  • tr(test_home) proc = subprocess.run( [sys.executable, str(HOOK), phase],
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Nickdevlab" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-elves 
Create a captivating mini-application called 'AI Workshop' that leverages the 'agent-elves' package to bring an interactive and visually appealing experience to users interested in AI development. The application should allow users to visualize and interact with their AI models as if they were working in a dynamic office environment within a tmux pane. Here’s a step-by-step guide on how to develop this application:

1. **Setup Environment**: Begin by setting up your Python environment with all necessary packages including 'agent-elves'. Ensure you have the latest version of 'agent-elves' installed to get the most out of its features.
2. **Design Workspace Layout**: Utilize 'agent-elves' to design an engaging workspace layout where different AI tasks are represented as distinct characters or entities moving around, symbolizing real-time processing and interactions.
3. **Integrate TMUX Pane**: Integrate the application into a tmux session, allowing users to switch between different panes showing various aspects of their AI projects, such as code editing, model training logs, and real-time performance metrics.
4. **Implement Interactive Features**: Enable users to interact with the animated AI agents directly from the tmux pane. This could include pausing/resuming tasks, adjusting parameters, or even deploying models to cloud environments.
5. **Enhance User Experience**: Customize the visual style of the workspace using 'agent-elves', allowing users to choose from predefined themes or create their own. Additionally, implement sound effects to enhance the immersive experience.
6. **Documentation and Tutorials**: Provide comprehensive documentation and tutorials for setting up 'AI Workshop' and getting started with customizing it to fit specific AI projects.
7. **Testing and Feedback**: Conduct thorough testing of 'AI Workshop' and gather user feedback to identify areas for improvement and new features to add.

This project aims to not only showcase the capabilities of 'agent-elves' but also to provide a fun and educational tool for developers working with AI.