agent-os-base

v0.2.9 suspicious
5.0
Medium Risk

基础智能体构建库

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some signs of potential misuse due to its network and shell risks, but lacks evidence of malicious intent. Incomplete metadata and possible inactivity of the maintainer add to the uncertainty.

  • Network risk from potential external service communication
  • Use of os.system which can be risky if not properly sanitized
  • Incomplete maintainer information
Per-check LLM notes
  • Network: The network calls may be legitimate if the package is designed to download files or communicate with external services.
  • Shell: Direct use of os.system for file operations could indicate potential risk if the paths or commands are manipulated; however, it might also be standard operational procedure.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The author's information is incomplete and the maintainer seems new or inactive.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • try: resp = requests.post(url, headers=headers, json=payload, verify=False, timeout=30
  • ") response = requests.get(url, params={"fileId": file_id}, stream=True, timeout=60)
  • 下载 zip response = requests.get(url, params={"fileId": file_id}, stream=True, timeout=60)
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • # 构建Agent文件夹 os.system(f"mkdir {agent_root_path}") os.system(f"touch {agent
  • r {agent_root_path}") os.system(f"touch {agent_root_path}/.env") os.system(f"mkdir -
  • ent_root_path}/.env") os.system(f"mkdir -p {agent_root_path}/skills") os.system(f"mk
  • t_root_path}/skills") os.system(f"mkdir -p {agent_root_path}/local-functions") os.sy
  • th}/local-functions") os.system(f"mkdir -p {agent_root_path}/mcp-toolsets") # 添加loc
  • 添加local-function的代码文件 os.system(f"touch {agent_root_path}/local-functions/function_toolset.p
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: 163.com>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-os-base 
构建一个名为 'SmartAgentScheduler' 的小型应用程序，该应用利用 'agent-os-base' 包来创建和管理智能任务调度器。此调度器将能够接收用户输入的任务描述，并根据预定义的规则或自定义逻辑安排这些任务。目标是为用户提供一种简便的方式来自动化他们的日常任务，例如定期检查电子邮件、发送提醒或执行其他重复性工作。

项目步骤如下：
1. 使用 'agent-os-base' 初始化一个基本智能体。
2. 实现一个任务解析器，允许用户通过简单的文本命令添加任务。
3. 设计一套灵活的调度规则，让用户可以指定何时何地执行任务（如每天上午9点检查邮件）。
4. 添加一个日志记录功能，用于跟踪任务的状态和执行情况。
5. 开发一个图形界面或命令行界面，使用户能够轻松查看和管理他们的任务列表。
6. 最后，确保应用程序具备一定的错误处理能力，能够在遇到问题时向用户提供有用的反馈。

核心功能包括但不限于：
- 支持多种触发条件（如时间、事件等）
- 自动化常见任务（如发送邮件、查询天气等）
- 易于扩展的架构，支持未来添加更多功能或集成第三方服务

请详细说明如何使用 'agent-os-base' 包中的关键特性来实现上述功能，并提供必要的代码示例。