AI Analysis
Final verdict: SUSPICIOUS
The package shows moderate network risk due to unverified HTTPS connections, which could be exploited. However, it has no shell execution risks and low metadata risk.
- Moderate network risk due to unverified HTTPS connections
- Sparse maintainer information
Per-check LLM notes
- Network: The use of unverified HTTPS connections and proxy settings may indicate potential risks for data exfiltration or other malicious activities.
- Shell: No shell execution patterns were detected.
- Metadata: Low risk, but the maintainer's information is sparse and lacks detail.
Package Quality Overall: Low (4.2/10)
○ Low
Test Suite
1.0
No test suite detected
No test files or test-runner configuration detected
◈ Medium
Documentation
5.0
Some documentation present
Detailed PyPI description (1576 chars)
○ Low
Contributing Guide
2.0
No contributing guide or governance files found
No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium
Type Annotations
5.0
Partial type annotation coverage
94 type-annotated function signatures detected in source
✦ High
Multiple Contributors
8.0
Active multi-contributor project
3 unique contributor(s) across 71 commits in RF-Tar-Railt/arknights-toolkitSmall but multi-author team (3–4 contributors)
Heuristic Checks
Outbound Network Calls
score 9.0
Found 6 network call pattern(s)
nfos["table"] async with httpx.AsyncClient(verify=False, proxy=proxy) as async_httpx: for op i: f"{token}"}} content = httpx.post(base_url, json=payload).content # 访问官服 page_content =token} content = httpx.post(base_url, data=payload).content page_content =: user_agent} async with httpx.AsyncClient(proxy=proxy) as client: try: for i in("table", {}) async with httpx.AsyncClient(verify=False, proxy=proxy, timeout=60) as client: q%BB%E8%AE%BF" async with httpx.AsyncClient(verify=False, proxy=proxy) as client: prts_res = (a
Code Obfuscation
No obfuscation patterns detected
Shell / Subprocess Execution
No shell execution patterns detected
Credential Harvesting
No credential harvesting patterns detected
Typosquatting
No typosquatting candidates detected
Registered Email Domain
score 3.0
Suspicious email domain flags: Very short email domain: qq.com>
Very short email domain: qq.com>
Suspicious Page Links
All external links appear legitimate
Git Repository History
Repository RF-Tar-Railt/arknights-toolkit appears legitimate
Maintainer History
score 6.0
3 maintainer concern(s) found
Author name is missing or very shortAuthor "" appears to have only 1 package on PyPI (new or inactive account)Package has no PyPI classifiers (low effort / metadata quality)
Known CVE Vulnerabilities
No known vulnerabilities found in OSV database.
AI App Starter Prompt
Use this prompt to build a project with arknights-toolkit
Create a fully-functional mini-application named 'Arknights Operator Manager' using the Python package 'arknights-toolkit'. This application will serve as a comprehensive tool for players of the game Arknights to manage their operators more efficiently. The app should include the following core functionalities: 1. **Operator Database**: Utilize the 'arknights-toolkit' to fetch and display a database of all available operators, including their attributes such as rarity, class, skills, and potential promotions. 2. **Operator Search**: Implement a search feature where users can search for specific operators based on their names, classes, or other attributes. 3. **Skill Upgrading Guide**: Provide a guide for skill upgrading, detailing the materials needed and the effects of each upgrade. This information should be dynamically fetched from 'arknights-toolkit'. 4. **Operator Progress Tracking**: Allow users to input and track their own operator progress, including levels, skills, and equipment. This data should be stored locally and not shared externally. 5. **Notification System**: Integrate a notification system that alerts users about new updates, events, or when operators they are interested in become available in gacha draws. 6. **User Interface**: Design a clean and user-friendly interface that makes it easy for players to navigate through the different features of the app. 7. **Integration with External APIs**: If possible, integrate with external APIs to provide real-time data such as event schedules or recent patch notes. To achieve these functionalities, you'll need to leverage various aspects of the 'arknights-toolkit', including but not limited to fetching operator data, handling API requests, and parsing responses. Ensure that your application is well-documented and includes instructions for setup and usage.
💬 Discussion Feed
No discussion yet. Be the first to share your thoughts!
Report Abuse / Security Issue