agenter

v0.1.3 suspicious
6.0
Medium Risk

Agenter — Backend-agnostic SDK for autonomous coding agents supporting Claude, Codex, Anthropic, and AWS Bedrock with streaming, budget controls, security validation, and LangGraph/PydanticAI adapters.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits significant risks related to code injection and potential credential harvesting, raising concerns about its safety and integrity.

  • High obfuscation risk due to use of eval() and exec()
  • Potential credential harvesting from environment variables
Per-check LLM notes
  • Obfuscation: The use of eval() and exec() indicates potential for code injection and obfuscation.
  • Credentials: Accessing AWS_BEARER_TOKEN_BEDROCK from environment variables suggests possible harvesting of sensitive credentials.
  • Metadata: The package has some minor red flags such as a missing author name and a non-secure external link, but no clear signs of typosquatting or severe malicious intent.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 6.0

Found 3 obfuscation pattern(s)

  • ities including: - Use of eval(), exec(), or similar dangerous functions - Hardcoded pa
  • alidator.validate({"app.py": "eval(user_input)"}, "/project") assert not result.passed
  • assert not result.passed # eval() is dangerous! """ is_blocking: bool def __in
✓ Shell / Subprocess Execution

No shell execution patterns detected

⚠ Credential Harvesting score 10.0

Found 4 credential access pattern(s)

  • sed on environment.""" if os.environ.get("AWS_BEARER_TOKEN_BEDROCK"): return DEFAULT_MODEL_BEDROCK
  • d be used.""" return bool(os.environ.get("AWS_BEARER_TOKEN_BEDROCK")) # Valid backends for spec parsing
  • , region_name=os.environ.get("AWS_REGION", DEFAULT_AWS_REGION), config=Config(
  • tacks (e.g., ../secret.txt or /etc/passwd). Args: file_changes: ModifiedFiles fr
✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: moonsonglabs.com>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://mypy-lang.org/
✓ Git Repository History

Repository moonsong-labs/agenter appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agenter 
Create a versatile code generation utility named 'CodeCraft' using the 'agenter' package. This utility will serve as a bridge between developers and AI coding assistants, allowing users to generate code snippets, solve coding challenges, and even write entire functions based on natural language descriptions. Here’s a detailed breakdown of what your project should include:

1. **User Interface**: Design a simple and intuitive command-line interface (CLI) where users can interact with the AI coding assistant.
2. **Functionality**:
   - **Code Snippet Generation**: Users can request code snippets for common programming tasks such as loops, conditionals, function definitions, etc., in various programming languages.
   - **Coding Challenges**: Provide a feature where users can describe a coding challenge in plain English, and the utility generates a solution.
   - **Function Writing**: Users can input a description of a function they need, and the utility will generate the corresponding function code.
3. **Integration with 'agenter'**:
   - Use 'agenter' to integrate with multiple AI backends like Claude, Codex, Anthropic, and AWS Bedrock seamlessly. Ensure that you utilize the streaming capabilities of 'agenter' to provide real-time updates during code generation.
   - Implement budget controls to manage API usage costs efficiently.
   - Include security validation checks to ensure the generated code is safe and free from malicious content.
   - Optionally, use LangGraph/PydanticAI adapters to enhance the accuracy and relevance of generated code.
4. **Additional Features**:
   - **Language Support**: Extend support to at least three major programming languages (e.g., Python, JavaScript, Java).
   - **Error Handling**: Implement robust error handling mechanisms to deal with invalid inputs and unexpected responses from the AI backend.
   - **Customization Options**: Allow users to customize their experience by setting preferences like preferred programming language, difficulty level of generated code, etc.
5. **Documentation**: Write comprehensive documentation detailing how to install and use CodeCraft, including examples and best practices.
6. **Testing**: Conduct thorough testing to ensure the reliability and performance of the utility.

Your task is to create a fully functional version of CodeCraft that demonstrates the power and flexibility of the 'agenter' package while providing practical value to software developers.