aivg

v0.4.0 suspicious
5.0
Medium Risk

AIVG — AI Voice Gateway: agent-platform-agnostic voice-satellite management plane + CLI

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits a moderate risk due to potential for shell command execution and external network calls, despite no clear evidence of malicious intent. The low activity and newness of the maintainer's account add to the suspicion.

  • moderate shell risk
  • potential for network calls
  • low activity maintainer account
Per-check LLM notes
  • Network: The network call pattern suggests the package may be making external requests, but without more context, it's hard to determine if this is intended functionality or malicious.
  • Shell: The shell execution patterns indicate the package runs external commands, which could be used for benign purposes like dependency management, but also pose a risk for executing arbitrary code, potentially leading to security vulnerabilities.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious obfuscation.
  • Credentials: No credential harvesting patterns detected, indicating low risk of malicious credential theft.
  • Metadata: The maintainer has a new or inactive account and the repository lacks community engagement.

📦 Package Quality Overall: Medium (6.0/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • Test runner config found: pyproject.toml
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://github.com/cloudomate/aivg/blob/main/README.md
  • Detailed PyPI description (5032 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 311 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 4 unique contributor(s) across 100 commits in cloudomate/aivg
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 1.5

Found 1 network call pattern(s)

  • ient": self._client = httpx.AsyncClient(base_url=self._base, timeout=self._timeout) return s
✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • return ( subprocess.run( [str(self.venv_python), "-c", code],
  • try: rc = subprocess.run( [str(self.venv_python), "-m", "pip", "show"
  • try: subprocess.run( cmd_deps, capture_o
  • try: rc = subprocess.run( cmd, capture_output=True,
  • try: rc = subprocess.run( [ str(self.venv_python)
  • try: rc = subprocess.run( ["hermes", "gateway", "status"],
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: cloudomate.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Cloudomate / AIVG contributors" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aivg 
Your task is to develop a versatile mini-application named 'VoiceSatelliteManager' using the Python package 'aivg'. This application will serve as a command-line interface (CLI) tool for managing various voice satellites across different AI platforms, ensuring seamless integration and operation. Your goal is to create a user-friendly tool that allows users to manage their voice satellite configurations, status checks, and updates efficiently.

The core functionalities of your application include:
1. **Voice Satellite Configuration Management**: Users should be able to configure settings for their voice satellites such as audio bitrate, language support, and integration with specific AI platforms.
2. **Status Monitoring**: Implement a feature that periodically checks the operational status of each voice satellite and reports back to the user through the CLI.
3. **Update and Maintenance**: Provide capabilities for users to update firmware, apply patches, and perform routine maintenance tasks on their voice satellites via the CLI.
4. **Platform Agnostic Interface**: Ensure that the application supports multiple AI platforms without requiring changes to the core codebase, leveraging 'aivg's platform-agnostic design.

To achieve these goals, you will utilize the 'aivg' package as follows:
- Use 'aivg' to establish connections with voice satellites across various AI platforms.
- Leverage 'aivg' for configuration management, where you define and modify voice satellite settings programmatically.
- Employ 'aivg' to monitor the health and status of voice satellites, including error detection and reporting.
- Utilize 'aivg' for performing updates and maintenance operations on voice satellites, ensuring smooth operations and compliance with latest standards.

Your final deliverable should include a well-documented CLI tool, complete with instructions on how to install and use it, along with a brief explanation of how 'aivg' contributes to its functionality.