arxiv-mcp-server

v0.5.0 safe
3.0
Low Risk

A flexible arXiv search and analysis service with MCP protocol support

🤖 AI Analysis

Final verdict: SAFE

The package is considered safe based on the analysis. While there are minor concerns regarding metadata and network interactions, there is no evidence of malicious activities such as shell execution, obfuscation, or credential harvesting.

  • Low risk in network, shell, obfuscation, and credential aspects.
  • Metadata has minor issues with non-HTTPS links and incomplete author details.
Per-check LLM notes
  • Network: Network calls are expected for packages interacting with external APIs like arXiv, but should be monitored for unusual endpoints or excessive data transfer.
  • Shell: No shell execution patterns detected.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious activity.
  • Credentials: No credential harvesting patterns detected, suggesting secure handling of sensitive information.
  • Metadata: The presence of a non-HTTPS link and the author having a short or missing name raises some concerns, but there's no clear evidence of malicious intent.

📦 Package Quality Overall: Medium (7.0/10)

✦ High Test Suite 9.0

Test suite present — 14 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 14 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 7.0

Some documentation present

  • Documentation URL: "Documentation" -> https://github.com/blazickjp/arxiv-mcp-server#readme
  • Detailed PyPI description (15476 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 53 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 12 unique contributor(s) across 100 commits in blazickjp/arxiv-mcp-server
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

⚠ Outbound Network Calls score 6.0

Found 4 network call pattern(s)

  • {fields}" async with httpx.AsyncClient(timeout=30.0) as client: response = await client
  • " try: response = httpx.get(url, timeout=30, follow_redirects=True) if response.
  • esults=1" async with httpx.AsyncClient(timeout=20.0) as client: response = await _rate_
  • limited helper async with httpx.AsyncClient(timeout=30.0) as client: response = await _rate_limi
✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: amazon.com>

⚠ Suspicious Page Links score 2.0

Found 1 suspicious link(s) on the package page

  • Non-HTTPS external link: http://127.0.0.1:8080/mcp
✓ Git Repository History

Repository blazickjp/arxiv-mcp-server appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with arxiv-mcp-server 
Create a mini-application named 'ArxivExplorer' using the Python package 'arxiv-mcp-server'. This application will serve as a tool for researchers and students to efficiently search through arXiv papers and analyze their content. The app should allow users to perform the following actions:

1. Search for papers based on keywords, authors, and categories.
2. Retrieve detailed information about a specific paper including its abstract, publication date, and authors.
3. Analyze the frequency of certain keywords across multiple papers.
4. Provide a summary of the top cited papers within a specified time frame.
5. Save searches and favorite papers for future reference.
6. Integrate a recommendation system that suggests related papers based on the user's search history.

To achieve these functionalities, utilize the 'arxiv-mcp-server' package to connect to the arXiv database and perform efficient queries and analyses. The package's MCP protocol support will enable seamless communication between your application and the arXiv server. Additionally, consider implementing a user-friendly interface, possibly a web-based front-end, to make the application accessible and easy to use. Ensure that the application is well-documented, with clear instructions on installation, configuration, and usage. Finally, include unit tests to ensure the reliability and robustness of the application.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!