agent-spawn-mcp

v2.0.0 suspicious
5.0
Medium Risk

Universal MCP server for any OpenAI-compatible LLM. Supports OpenAI and Anthropic API formats.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some signs of potential risk, particularly due to its metadata and engagement levels, which suggest possible lack of maintenance or malicious intent.

  • Metadata risk score of 6 out of 10
  • Sparse maintainer profile and low repository engagement
Per-check LLM notes
  • Network: The use of httpx for network calls is common but could indicate data exfiltration if the URLs are controlled by an external entity.
  • Shell: No shell execution patterns detected, which is expected and safe.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The repository's lack of engagement and the maintainer's sparse profile raise concerns about potential malicious intent.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • import httpx with httpx.Client(timeout=3.0) as client: resp = client.get(url)
  • imeout self._client = httpx.Client(timeout=timeout) def close(self) -> None: self.
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: pleroma.studio>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agent-spawn-mcp 
Create a versatile chatbot platform named 'MCP Chat Hub' using the Python package 'agent-spawn-mcp'. This platform will serve as an intermediary between users and various AI language models, allowing users to interact with different models seamlessly through a single interface. Here's a detailed breakdown of the project steps and features:

1. **Setup Environment**: Ensure your development environment is set up with Python and install the 'agent-spawn-mcp' package.
2. **Design the Interface**: Develop a simple yet user-friendly command-line interface (CLI) for users to interact with the chatbot platform.
3. **Integrate 'agent-spawn-mcp'**: Use 'agent-spawn-mcp' to connect to multiple OpenAI-compatible language models. Configure it to support both OpenAI and Anthropic API formats.
4. **Implement User Interaction**: Allow users to select which model they want to communicate with from a list of supported models. Users should also be able to switch between models during a conversation if needed.
5. **Enhance Functionality**: Implement additional features such as saving conversations, allowing users to upload custom prompts or instructions for the AI models, and providing options to adjust parameters like temperature and max tokens.
6. **Security Measures**: Ensure all interactions are secure by handling API keys securely and implementing basic authentication for users accessing the chatbot platform.
7. **Testing & Documentation**: Thoroughly test the platform with different models and use cases. Document the setup process, usage instructions, and troubleshooting tips.

The 'agent-spawn-mcp' package is crucial for enabling seamless interaction with various AI models. It simplifies the integration process by supporting multiple API formats, making it easier to expand the platform with new models in the future.