aws-resiliency-mcp

v1.0.0 suspicious
5.0
Medium Risk

MCP server that evaluates AWS account resiliency and DR gaps

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits low risks in terms of network, shell, obfuscation, and credential handling, but the metadata risk score of 6 out of 10 raises concerns about its authenticity and maintenance effort.

  • Lack of maintainer history
  • Missing critical metadata
Per-check LLM notes
  • Network: No network calls suggest normal behavior for a package not requiring external API interactions.
  • Shell: No shell execution suggests the package does not perform system-level commands which is typical for most Python packages.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package shows several red flags such as lack of maintainer history and missing critical metadata, indicating potential low effort or malicious intent.

📦 Package Quality Overall: Medium (5.8/10)

✦ High Test Suite 9.0

Test suite present — 9 test file(s) found

  • Test runner config found: conftest.py
  • Test runner config found: pyproject.toml
  • 9 test file(s) detected (e.g. __init__.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (7432 chars)
◈ Medium Contributing Guide 7.0

Some contribution signals present

  • Governance file: security.py
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 65 type-annotated function signatures detected in source
○ Low Multiple Contributors 1.0

Unable to verify contributor count: no GitHub repository found

  • No GitHub repository linked — contributor count unavailable

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 8.0

4 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with aws-resiliency-mcp 
Create a Python-based application named 'ResilienceAssessor' that leverages the 'aws-resiliency-mcp' package to evaluate the disaster recovery (DR) readiness of AWS accounts. The application should include a user-friendly interface that allows users to input their AWS credentials securely and then assess the resiliency of their infrastructure. Here’s a detailed breakdown of the application’s requirements:

1. **User Authentication**: Implement a secure method for users to input their AWS access keys and secret keys. Ensure these credentials are handled securely using environment variables or a key management service.
2. **Account Assessment**: Use the 'aws-resiliency-mcp' package to analyze the user’s AWS account for potential resiliency gaps and disaster recovery preparedness. This includes evaluating resources such as EC2 instances, S3 buckets, RDS databases, etc., for redundancy and failover capabilities.
3. **Report Generation**: Once the assessment is complete, generate a comprehensive report detailing the findings. The report should highlight areas of strength, potential risks, and recommendations for improvement.
4. **Dashboard Interface**: Develop a simple web-based dashboard using Flask or Django where users can view their assessment results and track progress over time.
5. **Alert System**: Integrate an alert system that notifies users via email or SMS if critical issues are found during the assessment process.
6. **Customization Options**: Allow users to customize certain parameters of the assessment, such as specific regions or services to focus on.
7. **Documentation**: Provide clear documentation on how to install and use the application, including setup instructions for the 'aws-resiliency-mcp' package and any additional dependencies.

The 'aws-resiliency-mcp' package will be utilized primarily for performing the resiliency checks on the AWS account. Users will input their AWS credentials, and your application will call the relevant functions from the package to gather data and perform the analysis. Ensure that the application is well-documented and easy to extend for future updates or feature additions.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!