AI Analysis
Final verdict: SAFE
The package shows no direct signs of malicious activity, with low scores across most risk categories. However, the incomplete maintainer profile and use of getpass warrant caution.
- Shell execution to an editor is unusual
- Incomplete maintainer profile
Per-check LLM notes
- Network: No network calls detected, which is normal and expected.
- Shell: Shell execution to an editor is unusual but not necessarily malicious; it may be intended for development purposes.
- Obfuscation: No obfuscation patterns detected.
- Credentials: The usage of getpass indicates potential handling of sensitive information, but it is likely used for legitimate purposes such as user authentication.
- Metadata: The maintainer has an incomplete profile and seems to be new or inactive, which raises some concerns but does not strongly indicate malicious intent.
Package Quality Overall: Medium (5.2/10)
✦ High
Test Suite
9.0
Test suite present — 2 test file(s) found
Test runner config found: pyproject.toml2 test file(s) detected (e.g. smoke_test.py)
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (8905 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
147 type-annotated function signatures detected in source
◈ Medium
Multiple Contributors
5.0
Limited contributor diversity
1 unique contributor(s) across 35 commits in romamo/agentyperSingle author but highly active (35 commits)
Heuristic Checks
Outbound Network Calls
No suspicious network call patterns found
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
score 2.0
Found 1 shell execution pattern(s)
t) fname = f.name subprocess.call([editor, fname]) # noqa: S603 with open(fname) as f: #
Credential Harvesting
score 5.0
Found 2 credential access pattern(s)
}{hint}: " raw = getpass.getpass(prompt_str) if hide_input else input(prompt_str)raw2 = ( getpass.getpass("Repeat for confirmation: ") if hide_inp
Typosquatting
No typosquatting candidates detected
Registered Email Domain
Email domain looks legitimate: romavm.dev>
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository romamo/agentyper appears legitimate
Maintainer History
score 4.0
2 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with agentyper
Create a command-line utility named 'TaskMaster' using the 'agentyper' Python package. This utility will help users manage their daily tasks efficiently by allowing them to add, delete, update, and list tasks. Each task will have a title, description, due date, priority level (low, medium, high), and status (completed, pending). Additionally, the utility should support subcommands for different operations and allow for input validation and error handling through the power of Pydantic models. Here are the steps and features to implement: 1. Define a Task model using Pydantic that includes all necessary fields. 2. Implement subcommands for adding, deleting, updating, and listing tasks. 3. Ensure that each subcommand validates inputs according to the defined Task model. 4. Provide a way to persist tasks between sessions, possibly using a local file or a simple database. 5. Include a feature to mark tasks as completed or pending. 6. Add a command to display statistics about the user's tasks, such as total tasks, completed tasks, pending tasks, and average time taken to complete tasks. 7. Use Typer-compatible features of 'agentyper' to enhance the CLI experience. 8. Write tests to ensure the functionality of each command and model validation. 9. Document the usage of 'TaskMaster', including installation instructions, command examples, and expected outputs. By following these steps and utilizing the 'agentyper' package effectively, you'll create a robust and user-friendly tool for managing daily tasks.