antigravity-manager

v12.0.0 suspicious
6.0
Medium Risk

Account backup, restore, cooldown, and orchestration manager for Antigravity CLI

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits several concerning practices such as executing shell commands and using obfuscation techniques, raising suspicions about its true intentions despite potential benign uses.

  • High shell execution risk
  • Use of obfuscation
Per-check LLM notes
  • Network: The network call to google.com is likely a connectivity check, but the use of Bearer token suggests it might be accessing an API which could lead to sensitive data transmission.
  • Shell: Executing shell commands can be risky as it allows the package to run arbitrary code on the user's system, potentially leading to system compromise.
  • Obfuscation: The obfuscation pattern detected is likely used to evade simple keyword-based detection but does not inherently indicate malicious intent; however, it raises suspicion.
  • Credentials: The credential handling code appears to be collecting passphrases for encryption purposes, which is a legitimate practice in many applications, but lacks proper validation and error handling.
  • Metadata: The package shows some red flags including an unknown author and lack of community engagement, but there's no direct evidence of malice.

📦 Package Quality Overall: Medium (5.8/10)

✦ High Test Suite 9.0

Test suite present — 21 test file(s) found

  • Test runner config found: pyproject.toml
  • 21 test file(s) detected (e.g. test_backup_restore.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (10066 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 145 type-annotated function signatures detected in source
◈ Medium Multiple Contributors 6.0

Limited contributor diversity

  • 2 unique contributor(s) across 50 commits in dhruv13x/antigravity-manager
  • Two distinct contributors found

🔬 Heuristic Checks

⚠ Outbound Network Calls score 3.0

Found 2 network call pattern(s)

  • # Network try: urllib.request.urlopen("https://www.google.com", timeout=3) checks.
  • " try: response = requests.get(url, headers={"Authorization": f"Bearer {token}"}, timeout=1
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • z]).+$") TRUST_PROMPT_RE = re.compile( r"Do you trust the contents of this project\?.*requires permission to read, edit, and execute.*Yes, I trust this folder", re.IGNORECASE | re.DOTAL
⚠ Shell / Subprocess Execution score 10.0

Found 5 shell execution pattern(s)

  • ] try: subprocess.run(gpg_cmd, input=passphrase.encode(), check=True)
  • try: subprocess.run(gpg_cmd, input=passphrase.encode(), check=True)
  • tedProcess[str]: result = subprocess.run(args, text=True, capture_output=True) if check and resul
  • e() -> None: try: subprocess.run(["tmux", "-V"], capture_output=True, check=True) except
  • .getpid()}" if ( subprocess.run(["tmux", "has-session", "-t", session_name], capture_output=
⚠ Credential Harvesting score 5.0

Found 2 credential access pattern(s)

  • ase: passphrase = getpass.getpass("Enter passphrase for backup encryption: ") if not
  • passphrase = getpass.getpass(f"Passphrase for {archive_path.name}: ") gpg_cm
✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: gmail.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 2.5

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with antigravity-manager 
Your task is to develop a comprehensive mini-application named 'GravityGuard' that leverages the functionalities of the 'antigravity-manager' Python package. GravityGuard is designed to streamline the management of user accounts within the Antigravity CLI ecosystem. It will provide features such as account backups, restores, cooldown scheduling, and orchestration of account-related operations. Here’s a detailed outline of what your application should accomplish:

1. **Account Backup**: Implement a feature that allows users to create a backup of their current account settings and configurations. This backup should include all critical data necessary for account restoration.
2. **Account Restore**: Provide functionality to restore an account from a previously created backup. Ensure that the restored account state matches the backed-up state as closely as possible.
3. **Cooldown Scheduling**: Integrate a system where users can set up scheduled cooldowns for their accounts. Cooldowns refer to periods when certain actions are restricted or paused to prevent overuse or abuse.
4. **Orchestration Manager**: Develop an orchestration module that coordinates multiple account operations efficiently. This could involve managing sequences of actions, ensuring dependencies are met, and handling any errors gracefully.
5. **User Interface**: Design a simple and intuitive command-line interface (CLI) that makes it easy for users to interact with GravityGuard. Commands should be clearly documented and accessible through help menus.
6. **Error Handling**: Implement robust error handling mechanisms to manage exceptions and edge cases effectively. Ensure that users receive clear and informative feedback when something goes wrong.
7. **Configuration Management**: Allow users to configure GravityGuard settings such as default cooldown durations, backup locations, and more. These configurations should be stored securely and persistently.

The 'antigravity-manager' package will be central to your implementation. It provides essential functions for managing account backups, restoring them, scheduling cooldowns, and orchestrating operations. Your challenge is to integrate these functionalities seamlessly into GravityGuard while also adding value through thoughtful design and additional features. Remember to test each component thoroughly before finalizing your application.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!