🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows low risks in network, shell, obfuscation, and credential areas. However, the lack of detailed metadata and a linked GitHub repository increases suspicion about its legitimacy.

Sparse author information
No linked GitHub repository

Per-check LLM notes

Network: No network calls detected, which is normal and expected.
Shell: Shell execution may be part of the intended functionality, but requires further investigation to ensure it's not being used maliciously.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The author's information is sparse, and there's no linked GitHub repository, which raises some concerns about the package's legitimacy.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

try: completed = subprocess.run( resolved_command, cwd=root,
dProcess[str]: return subprocess.run( [sys.executable, "-m", "agent_harness_cli.cli",

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-harness-cli

Create a fully functional mini-application using the 'agent-harness-cli' Python package that serves as a task manager for personal productivity. This application should allow users to create, manage, and track their tasks, leveraging the structured checks and workflow state management capabilities of 'agent-harness-cli'. Here’s a detailed breakdown of the application requirements:

1. **Task Creation**: Users should be able to add new tasks with details such as title, description, due date, and priority level.
2. **Task Management**: Implement functionalities to edit, delete, and mark tasks as completed. Each task should have a status indicator showing whether it's pending, in progress, or completed.
3. **Structured Checks**: Utilize 'agent-harness-cli' to implement structured checks that ensure tasks are being executed correctly. For example, if a task has a specific deadline, the application should remind the user via notifications or emails when the deadline is approaching.
4. **Workflow State Management**: Use the workflow state management feature of 'agent-harness-cli' to transition tasks between different states (e.g., from 'pending' to 'in progress' to 'completed'). Ensure these transitions are logged for future reference.
5. **User Interface**: Develop a simple yet effective command-line interface (CLI) for interacting with the application. The CLI should provide clear commands for all operations like adding, editing, deleting, and viewing tasks.
6. **Integration with External Services**: Optionally, integrate the application with external services like email or calendar apps to send reminders or update task statuses automatically.
7. **Documentation**: Provide comprehensive documentation on how to install and use the application, including examples of typical workflows and troubleshooting tips.

Your task is to design and implement this application from scratch, ensuring it fully leverages the capabilities of 'agent-harness-cli' for managing and evaluating task workflows effectively.