🤖 AI Analysis

Final verdict: SAFE

The package shows low risks across most categories, with only metadata and shell command usage raising minor concerns. There is no strong indication of malicious intent or supply-chain attack.

Metadata issues with the author's information.
Potential risks associated with shell command usage.

Per-check LLM notes

Network: No network calls detected, which is normal for many packages.
Shell: Use of shell commands to manipulate directories might be legitimate but could also indicate potential risks like unintended file deletions or modifications.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The author's name is missing and the author seems new or inactive, which raises some concerns but does not strongly indicate malice.

📦 Package Quality Overall: Low (3.8/10)

○ Low Test Suite 1.0

No test suite detected

No test files or test-runner configuration detected

◈ Medium Documentation 5.0

Some documentation present

Detailed PyPI description (28434 chars)

○ Low Contributing Guide 2.0

No contributing guide or governance files found

No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found

◈ Medium Type Annotations 5.0

Partial type annotation coverage

202 type-annotated function signatures detected in source

◈ Medium Multiple Contributors 6.0

Limited contributor diversity

2 unique contributor(s) across 100 commits in AgoraIO-Extensions/Agora-Python-Server-SDK
Two distinct contributors found

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 4.0

Found 2 shell execution pattern(s)

sts(sdk_library_dir): os.system(f"rm -rf {sdk_library_dir}") os.makedirs(sdk_library_dir
.exists(sdk_dir): os.system(f"rm -rf {sdk_dir}") os.makedirs(agora_service_path,

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository AgoraIO-Extensions/Agora-Python-Server-SDK appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

Author name is missing or very short
Author "" appears to have only 1 package on PyPI (new or inactive account)

✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agora-python-server-sdk

Develop a real-time video conferencing mini-app using the Agora Python SDK. This application will serve as a proof-of-concept for integrating real-time communication into web applications. Your task includes setting up a basic server environment that handles user authentication, room management, and signaling between clients for establishing video calls. Here’s a breakdown of the steps and features you should implement:

1. **User Authentication**: Implement a simple user registration and login system where users can create accounts and log in to access the video conferencing feature.
2. **Room Management**: Allow users to create rooms and join existing ones. Each room should have unique identifiers and support multiple participants.
3. **Signaling System**: Use the Agora Python SDK to set up a signaling system that allows clients to exchange necessary information (like user IDs and tokens) required for joining a call.
4. **Real-Time Video Calls**: Integrate Agora’s real-time video streaming capabilities so that users within the same room can see and hear each other.
5. **Optional Features**: Consider adding additional functionalities such as chat messaging within the rooms, screen sharing, and recording options.

The Agora Python SDK will be used primarily for generating and managing the necessary tokens for secure access to Agora services, handling the signaling process between clients, and initializing the RTC engine for video streaming. Ensure your code is well-documented and modular for easy maintenance and future expansion.