agentic-gateway

v2.0.0 suspicious
4.0
Medium Risk

Universal agent protocol gateway — translate between A2A, MCP, OpenAI Assistants, and REST in one config file.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package agentic-gateway v2.0.0 exhibits low risks in terms of network, shell, obfuscation, and credential handling. However, metadata analysis reveals red flags such as an anonymous author and an empty repository, raising suspicion about its legitimacy.

  • Anonymous author
  • Empty git repository
Per-check LLM notes
  • Network: The network calls appear to be for health checks, which is a common and benign practice.
  • Shell: No shell execution patterns were detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows some red flags such as an author with no name or history, and an empty git repository, which could indicate potential risk.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • ttpx try: resp = httpx.get(f"{args.url.rstrip('/')}/health", timeout=5.0) if re
  • config self._client = httpx.AsyncClient(timeout=30.0) @classmethod def from_yaml(cls, path:
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agentic-gateway 
Develop a versatile task automation tool named 'TaskMaster' using the 'agentic-gateway' Python package. TaskMaster will serve as a bridge between various AI agents and APIs, enabling users to automate tasks across different platforms with ease. The app should allow users to define tasks, assign them to specific agents or APIs, and monitor their progress through a simple CLI interface.

Core Features:
1. Define Tasks: Users should be able to create tasks such as 'Send a tweet', 'Post to Facebook', or 'Retrieve weather data'. Each task must include parameters like API endpoint, method, payload, etc.
2. Assign Agents: Utilize 'agentic-gateway' to translate task requests into commands that can be understood by different agents and APIs. For instance, if a user wants to send a tweet, TaskMaster should use 'agentic-gateway' to convert this request into a format that Twitter's API understands.
3. Monitor Progress: Implement a feature to track the status of each task. Users should receive notifications when a task starts, completes, or fails.
4. Configuration Management: All configurations, including API keys and endpoints, should be stored in a single YAML file, leveraging 'agentic-gateway's ability to manage multiple protocols in one place.
5. Logging & Reporting: Maintain logs of all task executions and provide reporting capabilities to help users analyze task performance over time.

To achieve these goals, integrate 'agentic-gateway' as the central component for translating and executing tasks across different platforms. This will ensure seamless interaction with various AI services and APIs, making TaskMaster a powerful yet easy-to-use automation tool.