autocom

v1.2.2 suspicious
6.0
Medium Risk

一款用于自动化执行串口指令的命令行工具，支持多设备、多指令的串行和并行执行

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of potential obfuscation and has incomplete metadata, raising concerns about its legitimacy and purpose.

  • Potential obfuscation techniques observed
  • Incomplete author information and new/inactive account
Per-check LLM notes
  • Network: The package makes network calls to external URLs which could be for legitimate purposes like fetching configurations or updates, but requires further investigation to ensure there's no unauthorized data exchange.
  • Shell: No shell execution patterns detected, suggesting low risk of direct system command execution.
  • Obfuscation: The observed pattern suggests potential obfuscation, but it could also be used for legitimate purposes such as dynamic class loading.
  • Credentials: No direct evidence of credential harvesting is present.
  • Metadata: The author information is incomplete and the account seems new or inactive, raising some suspicion but not conclusive evidence of malice.

📦 Package Quality Overall: Low (4.6/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (4481 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 103 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 4 unique contributor(s) across 56 commits in iFishin/AutoCom
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

  • try: requests.get(config_url, timeout=5) logger.log_step_info(
  • WiFi配置 response = requests.get(config_url, timeout=5) if response.status_code =
  • try: requests.post( url=config_url, headers=config_headers,
  • try: response = requests.get(target_url, timeout=5) if response.status_code =
  • ": response = requests.get(url, headers=headers) elif method == "POST":
  • ": response = requests.post(url, headers=headers, json=body) else:
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • module = __import__(module_path, fromlist=[class_name]) custom_handler_class = getattr(module,
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: ifishin.top>

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository iFishin/AutoCom appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with autocom 
构建一个名为 'SerialBatchExecutor' 的小型应用程序，该程序使用Python的'autocom'包来实现对多个串行设备的指令批量处理。此应用程序的主要功能包括：

1. 用户可以通过命令行界面输入一系列设备的标识符（例如：端口号或设备名）以及对应的指令集。
2. 应用程序将这些设备分组，并根据用户指定的方式（串行或并行）执行指令。
3. 支持多种类型的指令，如读取数据、写入数据等，并能够处理不同设备间的数据交互。
4. 提供详细的日志记录功能，以便于调试和监控指令执行过程。
5. 允许用户自定义指令执行策略，例如设置超时时间、重试次数等。
6. 支持保存和加载指令配置文件，方便用户重复使用相同的指令集。
7. 在指令执行过程中提供实时反馈，显示当前正在执行的设备及其状态。
8. 集成错误处理机制，能够捕获并报告执行过程中遇到的问题。

请详细说明如何利用'autocom'包的核心特性来实现上述功能，并提供一个示例脚本展示如何使用这个应用程序。

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!