ageri-sdk

v0.5.0 suspicious
4.0
Medium Risk

Skill contract for the Ageri personal-AI platform — SkillBase, SkillResult, Task, OrchestratorContext, and proxy ABCs.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has a moderate risk score due to its metadata issues, such as an anonymous author and minimal repository activity, despite showing no immediate signs of malicious intent in terms of network, shell, or obfuscation risks.

  • Anonymous author
  • Minimal repository engagement
Per-check LLM notes
  • Network: No network calls detected, which is normal unless the package requires internet access to function properly.
  • Shell: No shell execution patterns detected, indicating no direct system command execution from the package.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
  • Credentials: No credential harvesting patterns detected, indicating low risk of malicious credential theft.
  • Metadata: The package shows several red flags including a lack of maintainer history, minimal repository engagement, and an anonymous author, suggesting potential risks.

📦 Package Quality Overall: Medium (5.8/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://docs.ageri.ai/sdk/
  • Detailed PyPI description (3203 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Classifier: Typing :: Typed
  • 82 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 5.0

Limited contributor diversity

  • 1 unique contributor(s) across 25 commits in ageri-platform/ageri-sdk
  • Single author but highly active (25 commits)

🔬 Heuristic Checks

Outbound Network Calls

No suspicious network call patterns found

Code Obfuscation

No obfuscation patterns detected

Shell / Subprocess Execution

No shell execution patterns detected

Credential Harvesting

No credential harvesting patterns detected

Typosquatting

No typosquatting candidates detected

Registered Email Domain

Email domain looks legitimate: gmail.com>

Suspicious Page Links

All external links appear legitimate

Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ageri-sdk
Create a mini-application named 'PersonalAIAssistant' using the Python package 'ageri-sdk'. This application will serve as a personal AI assistant that can perform various tasks based on user commands. It will utilize the core features of the 'ageri-sdk' such as Skill contracts, SkillResult, Task, OrchestratorContext, and proxy ABCs to manage and execute tasks efficiently.

Step-by-Step Instructions:
1. Initialize the project with a virtual environment and install the 'ageri-sdk' package.
2. Define skill contracts for different functionalities like 'weather', 'news', 'calendar', etc., each implementing the SkillBase interface provided by 'ageri-sdk'.
3. Implement the SkillResult class to handle the output of these skills, ensuring it can process and present data from each skill effectively.
4. Use the Task class to queue and manage requests for these skills, allowing the application to handle multiple requests concurrently.
5. Create an OrchestratorContext to coordinate between the skills and the tasks, ensuring seamless interaction and task execution.
6. Develop proxy classes that act as intermediaries between the user and the skill implementations, enhancing the flexibility and scalability of the application.
7. Integrate a simple user interface (CLI or basic web interface) that allows users to input commands and receive results from their PersonalAIAssistant.
8. Test the application thoroughly to ensure all skills work as expected and can handle various inputs gracefully.
9. Document the code and provide instructions on how to run the application.

Suggested Features:
- Ability to add new skills easily by extending the SkillBase interface.
- Support for both synchronous and asynchronous task execution.
- Logging mechanism to track the execution of tasks and skills.
- Error handling to manage unexpected situations gracefully.
- User authentication and authorization to secure access to the personal assistant.