🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits some concerning behaviors such as network calls to unusual endpoints and a lack of historical metadata, which raises suspicion but does not conclusively point to malicious intent.

Unusual network endpoints
Lack of historical metadata

Per-check LLM notes

Network: The observed network calls to unusual endpoints like .well-known/arkclaw-cli may indicate unexpected behavior and could be used for unauthorized communication.
Shell: No shell execution patterns were detected in the provided code snippets.
Obfuscation: No obfuscation patterns detected, indicating low risk.
Credentials: No credential harvesting patterns detected, indicating low risk.
Metadata: The package is newly created with no history and lacks a git repository link, raising concerns about its legitimacy.

🔬 Heuristic Checks

⚠ Outbound Network Calls score 7.5

Found 5 network call pattern(s)

p("/") try: raw = urllib.request.urlopen(base + "/.well-known/arkclaw-cli", timeout=8).read()
sion={STS_VERSION}" req = urllib.request.Request( url, data=body, headers={"Content-Type": "a
) try: raw = urllib.request.urlopen(req, timeout=15).read() except urllib.error.HTTP
SION}" try: raw = urllib.request.urlopen( urllib.request.Request(url, data=body,
.request.urlopen( urllib.request.Request(url, data=body, headers=headers), timeout=30

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

No GitHub repository link found

⚠ Maintainer History score 6.0

3 maintainer concern(s) found

Only one version has ever been released — brand new package
Package uploaded less than 24 hours ago (2026-06-05T09:39:15.000Z)
Author "ArkClaw Team" appears to have only 1 package on PyPI (new or inactive account)

💡 AI App Starter Prompt

Use this prompt to build a project with arkclaw-webchat-cli

Create a command-line interface (CLI) tool named 'ArkChat' that allows users to securely chat within their enterprise environment using the ArkClaw EE space's Claw service. This tool will leverage the 'arkclaw-webchat-cli' Python package to facilitate secure, single sign-on (SSO) based communication without needing to store any permanent access keys (AK/SK). Your task is to develop a fully functional mini-application that not only integrates 'arkclaw-webchat-cli' but also adds several user-friendly features.

**Core Functionality:**
1. **User Authentication:** Upon launching the application, users should be prompted to authenticate via their enterprise SSO credentials.
2. **Real-Time Messaging:** Once authenticated, users should be able to send and receive messages in real-time.
3. **Command Support:** Integrate support for basic commands such as '/help', '/users', '/logout', etc., to enhance user experience.
4. **Persistent Chat Sessions:** Allow users to resume previous chat sessions without needing to re-authenticate if they were logged out due to inactivity.
5. **Error Handling:** Implement robust error handling to manage common issues like network errors, authentication failures, and unexpected API responses.

**Suggested Features:**
- **Profile Management:** Users should be able to view and edit their profiles, including changing display names.
- **Group Chats:** Extend functionality to support group chats, allowing users to create and join multiple groups.
- **Message History:** Provide an option to view message history for both private and group chats.
- **Notification System:** Implement a notification system to alert users of new messages even when the application is minimized or not active.
- **Custom Themes:** Allow users to customize the appearance of the CLI interface.

Your project should demonstrate a deep understanding of the 'arkclaw-webchat-cli' package's capabilities and limitations, effectively utilizing it to provide a seamless and secure chat experience for enterprise users.