agenticwerx-mcp-client

v1.5.19 suspicious
6.0
Medium Risk

Simple MCP client that connects to your AgenticWerx MCP server to retrieve rules

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits moderate risks due to its network and shell command execution capabilities, which could be exploited. However, there is no concrete evidence of malicious intent.

  • network risk
  • shell risk
Per-check LLM notes
  • Network: The network calls with Authorization headers may indicate legitimate API interactions but could also be used for unauthorized access or data exfiltration.
  • Shell: Executing shell commands can be risky as it allows arbitrary command execution which might be exploited for malicious purposes.
  • Obfuscation: The obfuscation pattern is not typical of standard coding practices and may indicate an attempt to hide code behavior.
  • Credentials: No clear patterns of credential harvesting are present in the provided snippet.
  • Metadata: The missing repository and the author's incomplete information suggest potential issues, but there is no clear evidence of malice.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • ndpoint self.client = httpx.AsyncClient( headers={ "Authorization": f"Be
  • /api" self._client = httpx.AsyncClient( headers={ "Authorization": self
  • ken}" self._client = httpx.AsyncClient( headers={ "Authorization": self
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • ion=f"agenticwerx-mcp-client {__import__('agenticwerx_mcp_client').__version__}", ) # Subcommands for CLI mode su
⚠ Shell / Subprocess Execution score 2.0

Found 1 shell execution pattern(s)

  • y) self.process = subprocess.Popen( # nosec B603 [self.command] + self.args,
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: agenticwerx.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agenticwerx-mcp-client 
Your task is to develop a simple yet powerful command-line tool that helps users manage their tasks based on rules retrieved from an AgenticWerx MCP server using the 'agenticwerx-mcp-client' Python package. This tool will allow users to interact with their task management system directly from the terminal, providing a seamless experience for managing daily tasks according to predefined rules.

### Project Overview:
- **Name:** TaskMCP Commander
- **Goal:** Create a CLI tool that fetches task rules from an AgenticWerx MCP server and allows users to add, update, delete, and list tasks based on these rules.
- **Features:**
  - Fetch task rules from the MCP server.
  - Add new tasks to the system.
  - Update existing tasks.
  - Delete tasks.
  - List all tasks.
  - Filter tasks based on specific criteria (e.g., priority, status).
  - Support for command-line arguments for specifying operations and parameters.

### Steps to Implement:
1. **Setup Environment:** Ensure Python is installed and create a virtual environment for your project. Install the 'agenticwerx-mcp-client' package along with any other necessary dependencies.
2. **Fetch Rules:** Use the 'agenticwerx-mcp-client' package to connect to your AgenticWerx MCP server and fetch the task rules. Store these rules locally for quick access.
3. **Task Management Functions:** Develop functions to handle adding, updating, deleting, and listing tasks. Each function should check if the task complies with the fetched rules before performing the operation.
4. **CLI Interface:** Build a command-line interface that accepts commands like `add`, `update`, `delete`, `list`, and `filter`. Use argparse or similar library to parse command-line arguments.
5. **Error Handling & Logging:** Implement robust error handling and logging to ensure the application remains stable and informative.
6. **Testing:** Write tests to validate the functionality of each feature, ensuring that the application behaves as expected under various conditions.
7. **Documentation:** Provide clear documentation on how to install and use the tool, including examples of common usage scenarios.

### Utilizing 'agenticwerx-mcp-client':
- Initialize a connection to your AgenticWerx MCP server using the package.
- Retrieve the task rules and store them in a local data structure.
- When performing operations on tasks, consult these rules to ensure compliance before proceeding with the action.
- Handle any errors related to connectivity or rule retrieval gracefully, informing the user of any issues and suggesting possible solutions.