ani-cli-win

v4.14.3 suspicious
7.0
High Risk

Windows-native Python port of ani-cli – search, stream & download anime

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package ani-cli-win v4.14.3 exhibits significant risks due to its network and shell execution behaviors, along with questionable metadata. While it may serve legitimate purposes, the lack of transparency and potential obfuscation raise concerns.

  • High shell risk due to execution of external commands
  • Unclear origin and sparse maintainer history
Per-check LLM notes
  • Network: Network calls appear to be related to fetching subtitles and could be normal for an anime-related CLI tool.
  • Shell: Shell execution patterns include running external commands which might be part of the package's functionality but could pose a risk if not properly controlled.
  • Obfuscation: The observed patterns suggest potential obfuscation of code, but without more context, it's unclear if this is malicious.
  • Credentials: No clear signs of credential harvesting are present.
  • Metadata: The package shows several red flags including an untraceable repository and sparse maintainer history, indicating potential risk.

📦 Package Quality Overall: Low (2.4/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
○ Low Documentation 1.0

No documentation detected

  • No documentation URL, doc files, or meaningful description found
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 50 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Could not retrieve contributor data from GitHub

  • GitHub API error: 404

🔬 Heuristic Checks

⚠ Outbound Network Calls score 4.5

Found 3 network call pattern(s)

  • try: sub_resp = requests.get(links.subtitle, timeout=30) sub_resp.raise_for_s
  • {"Referer": referer} with requests.get(url, stream=True, headers=headers, timeout=30) as r:
  • ces_from_plain, ) _session = requests.Session() _session.headers.update({ "User-Agent": AGENT, "Ac
⚠ Code Obfuscation score 4.0

Found 2 obfuscation pattern(s)

  • .replace("_", "/") return base64.b64decode(padded) def decode_tobeparsed(blob: str) -> str: """
  • Anime API. """ data = base64.b64decode(_pad_b64(blob)) iv_12 = data[1:13] # 1
⚠ Shell / Subprocess Execution score 10.0

Found 6 shell execution pattern(s)

  • g for updates…") result = subprocess.run( [sys.executable, "-m", "pip", "install", "--upgrade
  • return [] result = subprocess.run( ["ani-skip", "-q", skip_title or "", "-e", ep_no],
  • ") try: result = subprocess.run( ["winget", "install", "-e", "--id", "shinchiro.
  • ds"] = True try: subprocess.Popen(cmd, **kwargs) except FileNotFoundError: exe = c
  • e.""" try: return subprocess.run(cmd).returncode except FileNotFoundError: exe =
  • 3[0m {out_path}") subprocess.run(cmd, check=True) elif shutil.which("ffmpeg"):
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

Repository not found (deleted or private)

  • Repository not found (deleted or private)
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with ani-cli-win 
Your task is to develop a command-line interface (CLI) application using Python that leverages the 'ani-cli-win' package to create a powerful tool for managing anime streams and downloads. This mini-app should allow users to easily search for anime, filter results based on various criteria, and download/stream their favorite episodes directly from the command line. Here’s a step-by-step guide on what your application should achieve:

1. **Setup Environment**: Ensure you have Python installed along with the 'ani-cli-win' package. You may need to install additional dependencies such as requests and colorama for enhanced functionality.
2. **Application Structure**: Your application should consist of a main script that acts as the entry point and multiple helper functions to handle different tasks like searching, filtering, downloading, and streaming.
3. **Search Functionality**: Implement a robust search function that allows users to query anime titles. Users should be able to specify parameters such as genre, year, and popularity to refine their search.
4. **Display Results**: After performing a search, display the results in a user-friendly format. Include options to sort and filter these results dynamically.
5. **Download/Stream Episodes**: Once a specific anime has been selected, provide options for users to either stream or download episodes. Ensure the app supports multiple quality options and handles file naming conventions appropriately.
6. **User Interface Enhancements**: Utilize the colorama package to add colored text output for better readability and user experience.
7. **Error Handling**: Implement comprehensive error handling to manage cases where no results are found, network issues arise, or invalid inputs are given.
8. **Configuration File**: Allow users to configure default settings such as preferred download location, quality preference, etc., through a configuration file.
9. **Help and Documentation**: Provide clear help messages and documentation within the application to assist new users in understanding how to use the tool effectively.

Your goal is to create an intuitive, efficient, and user-friendly CLI tool that simplifies the process of finding, watching, and downloading anime. Focus on making the integration with 'ani-cli-win' seamless and the overall user experience delightful.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!