agent-rules-sync

v1.5.3 suspicious
6.0
Medium Risk

Synchronize rules and skills across AI coding assistants (Claude Code, Cursor, Gemini, OpenCode, Codex)

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant risks due to shell execution and code obfuscation, which are concerning practices. Although there's no evidence of network calls or credential harvesting, the overall risk cannot be ignored.

  • High shell risk
  • Intentional code obfuscation
Per-check LLM notes
  • Network: No network calls were detected, which is neutral.
  • Shell: Detected shell executions include installing packages and managing services, which may be intended but should be scrutinized for necessity and permissions.
  • Obfuscation: The code snippet suggests intentional obfuscation to hide the true purpose of the code, which is suspicious.
  • Credentials: No clear signs of credential harvesting are present in the provided snippet.
  • Metadata: The author has only one package, which might indicate a new or less active account, but there are no other red flags.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • yntaxError if invalid compile(code, "uninstall.py", "exec") class TestWindowsDaemonCompatibility: """Test Windo
⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • shutil_which("brew"): subprocess.run(["brew", "install", "atuin"], check=True) return Tru
  • True) return True subprocess.run( ["sh", "-c", "curl --proto '=https' --tlsv1.2 -LsSf
  • the service try: subprocess.run(['launchctl', 'unload', str(plist_path)], capture_output=Tru
  • capture_output=True) subprocess.run(['launchctl', 'load', str(plist_path)], check=True,
  • the service try: subprocess.run(['systemctl', '--user', 'daemon-reload'],
  • capture_output=True) subprocess.run(['systemctl', '--user', 'enable', 'agent-rules-sync.service'
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository dhruv-anand-aintech/agent-rules-sync appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Agent Rules Sync Contributors" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-rules-sync 
Create a mini-application named 'AIAssistantHub' that acts as a central hub for managing and synchronizing rules and skills across various AI coding assistants such as Claude Code, Cursor, Gemini, OpenCode, and Codex. This application will allow users to add, modify, and delete rules and skills for their AI assistants in one place, ensuring consistency and efficiency in their coding environments.

Step 1: Set up the project structure and install the necessary dependencies, including the 'agent-rules-sync' package.
Step 2: Design a user-friendly interface for adding new rules and skills. Users should be able to specify the name of the rule/skill, its description, and the specific AI assistant it applies to.
Step 3: Implement functionality to synchronize these rules and skills across all connected AI assistants using the 'agent-rules-sync' package. Ensure that any changes made through the UI are reflected in real-time across all assistants.
Step 4: Add a feature to view the current set of rules and skills for each AI assistant within the application. This allows users to audit and manage their configurations effectively.
Step 5: Develop a versioning system that tracks changes to rules and skills over time. This will enable users to revert to previous versions if needed.
Step 6: Include error handling and logging to ensure the application runs smoothly and any issues are easily identifiable.

Features:
- User authentication and authorization to protect user-specific configurations.
- Support for multiple projects, allowing users to manage different sets of rules and skills for distinct coding projects.
- Integration with existing CI/CD pipelines for automated synchronization during deployment processes.
- Detailed documentation and tutorials on how to use the application effectively.

The 'agent-rules-sync' package is utilized throughout the project to facilitate the synchronization process between the application and the AI assistants. It provides the core functionality needed to ensure that any updates made via the application are accurately applied to the respective AI assistants.