🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has moderate risks due to its ability to execute shell commands and poor metadata quality, though no direct evidence of malicious intent was found.

Shell risk detected
Poor metadata quality

Per-check LLM notes

Network: No network calls detected, which is low risk.
Shell: Detection of shell execution suggests potential for executing arbitrary commands, which could be used maliciously.
Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
Credentials: No credential harvesting patterns detected, indicating low risk of malicious credential theft.
Metadata: The package shows signs of low maintainer activity and poor metadata quality, raising suspicion but not conclusive evidence of malintent.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 5 shell execution pattern(s)

s try: result = subprocess.run(command, shell=True, check=True, stdout=subprocess.PIPE, std
s try: result = subprocess.run(['python', '-c', code], check=True, stdout=subprocess.PIPE,
s try: result = subprocess.run(['python', file], check=True, stdout=subprocess.PIPE, stderr
rt subprocess result = subprocess.run( ['findstr', pattern, file], stdout=subpro
ult = subprocess.run(command, shell=True, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 8.0

4 maintainer concern(s) found

Only one version has ever been released — brand new package
Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agentic_terminal_mcp

Create a command-line utility called 'TerminalGuru' using the 'agentic_terminal_mcp' package that enhances user interaction with their terminal environment. TerminalGuru should offer a variety of functionalities including but not limited to executing shell commands, managing files and directories, and providing real-time feedback on system status. The application should also support custom scripts and plugins to extend its functionality.

Step 1: Initialize the project and install 'agentic_terminal_mcp'.
Step 2: Design a user-friendly interface that allows users to input commands and view outputs directly within the terminal.
Step 3: Implement core functionalities such as executing basic shell commands (ls, cd, mkdir, etc.), managing files and directories, and displaying system information (CPU usage, memory usage).
Step 4: Utilize the 'agentic_terminal_mcp' package to enable advanced features like asynchronous command execution, interactive sessions, and integration with external services via API calls.
Step 5: Develop a plugin system that allows users to add custom scripts or integrate third-party tools into TerminalGuru.
Step 6: Test the application thoroughly to ensure all functionalities work as expected and provide a seamless user experience.
Step 7: Document the codebase and create a user guide to help others understand how to use TerminalGuru effectively.

Suggested Features:
- Support for tab completion and history management.
- Ability to save and load sessions.
- Integration with cloud storage services for remote file management.
- Customizable themes and keyboard shortcuts.

Utilizing 'agentic_terminal_mcp': Integrate the package to handle terminal interactions, manage sessions, and execute commands efficiently. Leverage its capabilities to enhance the user experience and simplify development efforts.