autorunne-grill

v0.1.4 suspicious
5.0
Medium Risk

Project-aware grill-me skill for safer Autorunne-backed feature changes.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows some unusual behavior with shell execution during installation which could be exploited. However, there is no direct evidence of malicious activity. The low engagement and recent activity in the repository raise concerns.

  • Potential for executing arbitrary commands due to shell execution patterns.
  • Low repository engagement and recent activity suggest possible malicious intent.
Per-check LLM notes
  • Network: No network calls detected.
  • Shell: Shell execution patterns observed may be part of package installation logic but could indicate potential for executing arbitrary commands.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The repository's recent activity and low engagement raise concerns about potential malicious intent.

📦 Package Quality Overall: Low (4.4/10)

◈ Medium Test Suite 6.0

Partial test coverage signals detected

  • 1 test file(s) detected (e.g. test_autorunne_grill.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (6320 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 5.0

Partial type annotation coverage

  • 6 type-annotated function signatures (partial)
○ Low Multiple Contributors 2.0

Single-author or unverifiable project

  • 1 unique contributor(s) across 5 commits in HUAFIRE777/autorunne-grill
  • Single author with few commits — possibly a personal or throwaway project

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 5 shell execution pattern(s)

  • ll" / "SKILL.md" result = subprocess.run( [sys.executable, "-m", "autorunne_grill", "install"
  • r(parents=True) result = subprocess.run( [sys.executable, "-m", "autorunne_grill", "install"
  • r(parents=True) result = subprocess.run( [sys.executable, "-m", "autorunne_grill"],
  • ctory(tmp_path): result = subprocess.run( [sys.executable, "-m", "autorunne_grill"],
  • s_cursor_rule(): result = subprocess.run( [sys.executable, "-m", "autorunne_grill", "path", "
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 5.0

Git history flags: Repository has zero stars and zero forks

  • Repository has zero stars and zero forks
  • All 5 commits happened within 24 hours
⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Autorunne Grill contributors" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with autorunne-grill 
Create a mini-application called 'FeatureGuardian' that leverages the 'autorunne-grill' package to ensure safe and controlled updates to features within a software project. FeatureGuardian should monitor a specified project directory for any changes in feature files (e.g., configuration files, code snippets related to specific features). Upon detecting changes, it will use 'autorunne-grill' to assess the safety of these changes based on predefined criteria and project-aware context. If the changes meet the safety standards, FeatureGuardian will automatically apply them; otherwise, it will log a warning and prevent the changes from being applied.

### Features:
1. **Project Directory Monitoring**: Continuously watch over a designated project directory for modifications in feature-related files.
2. **Safety Assessment**: Utilize 'autorunne-grill' to evaluate each change against a set of predefined safety rules tailored to the project’s context.
3. **Automated Application or Rejection**: Depending on the assessment, either apply the changes automatically if they pass the safety checks or reject them if they fail.
4. **Logging and Reporting**: Maintain logs of all changes made and their outcomes (applied/rejected), providing insights into the health and stability of the project's feature development process.
5. **Customizable Rules**: Allow users to define custom safety rules through a simple configuration file, ensuring flexibility in adhering to different project requirements.
6. **User Interface**: Develop a basic command-line interface (CLI) for interacting with FeatureGuardian, allowing users to configure settings, view logs, and manage ongoing operations.

### How to Use 'autorunne-grill':
- Integrate 'autorunne-grill' into FeatureGuardian to perform safety assessments on detected changes. This involves calling the appropriate functions provided by 'autorunne-grill' whenever a change is identified.
- Ensure that 'autorunne-grill' is configured correctly according to the project’s specific needs before performing any assessments.
- Leverage 'autorunne-grill's ability to understand the project context to make informed decisions about the safety of proposed changes.

By following these steps and utilizing 'autorunne-grill', you will create a robust tool that helps maintain the integrity and safety of feature updates within your project.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!