agentic-toolbelt

v0.1.24 suspicious
6.0
Medium Risk

Packages agent payload assets and installs them into a project via the agentic-set CLI.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits a moderate level of risk due to potential obfuscation for hiding functionality and incomplete maintainer information.

  • Obfuscation risk of 5/10
  • Incomplete maintainer information and lack of associated GitHub repository
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires external services.
  • Shell: No shell execution detected, reducing risk of local system compromise.
  • Obfuscation: The obfuscation pattern observed is suspicious and may indicate an attempt to hide functionality, but it could also be a non-malicious use of obfuscation.
  • Credentials: No clear patterns indicating credential harvesting were detected.
  • Metadata: The package has no associated GitHub repository and the maintainer information is incomplete, which raises some suspicion.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • 8") real_copy2 = __import__("shutil").copy2 def fail_agents_copy(source, destination
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agentic-toolbelt 
Create a Python-based task management application called 'TaskMaster' that leverages the 'agentic-toolbelt' package to streamline the setup and deployment of task-related tools and services. TaskMaster will allow users to create tasks, assign them to team members, set deadlines, and track progress. Additionally, it will integrate various third-party services for notifications, calendar integration, and more.

Step-by-Step Instructions:
1. Set up your development environment by installing Python and setting up a virtual environment.
2. Install the 'agentic-toolbelt' package using pip.
3. Use the agentic-set CLI provided by 'agentic-toolbelt' to install necessary packages and configurations for TaskMaster.
4. Develop the core functionalities of TaskMaster including user authentication, task creation, assignment, and deadline setting.
5. Implement a feature to send reminders and updates about tasks via email or SMS using integrated third-party services.
6. Integrate calendar applications like Google Calendar to automatically schedule tasks based on their deadlines.
7. Ensure that all third-party services and configurations are managed efficiently through 'agentic-toolbelt'.
8. Test the application thoroughly to ensure all features work as expected.
9. Deploy the application using the deployment options provided by 'agentic-toolbelt'.

Suggested Features:
- User-friendly web interface for managing tasks.
- RESTful API for programmatic access.
- Support for multiple users and teams.
- Real-time notifications and updates.
- Integration with popular calendar applications.
- Option to export task lists in various formats such as CSV or PDF.