🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risks due to potential shell execution and obfuscation practices, though there's no concrete evidence of malicious intent. However, the low maintainer activity and poor metadata quality raise concerns about its reliability and integrity.

Shell execution risk
Potential code obfuscation
Low maintainer activity
Poor metadata quality

Per-check LLM notes

Network: No network calls detected, which is not suspicious.
Shell: Shell execution is present and could be used for unintended actions if not properly sanitized or controlled.
Obfuscation: The code snippet suggests some form of obfuscation but does not clearly indicate malicious intent; it could be part of a legitimate feature like type checking or conditional logic.
Credentials: No clear signs of credential harvesting detected.
Metadata: The package shows signs of low maintainer activity and poor metadata quality, raising some suspicion but not conclusive evidence of malice.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

in (types.UnionType, getattr(__import__("typing"), "Union", object)): return False, annotation if

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

= 60): ... return subprocess.run(cmd, shell=True, timeout=timeout) ... >>> to
return subprocess.run(cmd, shell=True, timeout=timeout) ... >>> tool = ExecTool(c

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)
Package has no PyPI classifiers (low effort / metadata quality)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agenticli

Create a command-line utility named 'AgentTaskMaster' using the 'agenticli' package. This utility will serve as a personal task management tool for AI agents, allowing them to easily manage their tasks through simple CLI commands. Here’s a detailed plan on how to implement this application:

1. **Project Setup**: Initialize your Python environment and install the 'agenticli' package.
2. **Core Functionality**: Define several core commands such as `add`, `list`, `delete`, and `complete` which allow users to add new tasks, list all current tasks, delete specific tasks, and mark tasks as completed.
3. **Task Details**: Each task should have a title, description, due date, and status (active, completed).
4. **Integration with 'agenticli'**: Use 'agenticli' to expose these functionalities as CLI commands. Ensure that each command is intuitive and easy to use, leveraging the simplicity of 'agenticli'.
5. **Advanced Features**:
- Implement a `priority` flag for tasks to categorize them as high, medium, or low priority.
- Add a `search` command that allows searching tasks based on keywords in the title or description.
- Include a `reminder` feature that sends notifications (via email or SMS) when a task is nearing its due date.
6. **User Interface**: Design a clean and user-friendly interface for the CLI. Make sure that help messages and usage instructions are clear and concise.
7. **Testing**: Thoroughly test each command to ensure reliability and functionality. Consider edge cases such as adding duplicate tasks or deleting non-existent tasks.
8. **Documentation**: Provide comprehensive documentation on how to set up and use the 'AgentTaskMaster' utility, including examples and best practices for integrating it into existing workflows.

By following these steps, you'll create a robust, user-friendly task management utility tailored for AI agents, demonstrating the power and versatility of the 'agenticli' package.