azure-mgmt-kusto

v3.4.0 suspicious
5.0
Medium Risk

Microsoft Azure Kusto Management Client Library for Python

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows signs of potential obfuscation through the use of eval(), which is concerning but not conclusive evidence of malicious intent. Given that no other red flags were raised, further investigation into the specific use of eval() and the package's overall functionality is recommended.

  • Use of eval() for obfuscation
  • Unusual absence of network calls
Per-check LLM notes
  • Network: No network calls detected, which is unusual but not necessarily indicative of malicious activity without context; it could be designed to work offline or require explicit API calls.
  • Shell: No shell execution patterns detected, suggesting the package does not execute external commands without user interaction.
  • Obfuscation: The use of eval() for obfuscation is risky and often associated with malicious intent, but could be part of complex legitimate use cases.
  • Credentials: No clear patterns indicative of credential harvesting were found.
  • Metadata: The author Microsoft Corporation has a single package, which may indicate a new or less active account but does not necessarily suggest malicious intent.

📦 Package Quality Overall: Medium (7.0/10)

✦ High Test Suite 9.0

Test suite present — 8 test file(s) found

  • Test runner config found: conftest.py
  • 8 test file(s) detected (e.g. conftest.py)
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (17869 chars)
○ Low Contributing Guide 4.0

No contributing guide or governance files found

  • Development Status classifier >= Beta
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 397 type-annotated function signatures detected in source
✦ High Multiple Contributors 10.0

Active multi-contributor project

  • 35 unique contributor(s) across 100 commits in Azure/azure-sdk-for-python
  • Active community — 5 or more distinct contributors

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

⚠ Code Obfuscation score 8.0

Found 4 obfuscation pattern(s)

  • _unicode(data) return eval(data_type)(data) # nosec # pylint: disable=eval-used @
  • _unicode(attr) return eval(data_type)(attr) # nosec # pylint: disable=eval-used @
  • __path__ = __import__("pkgutil").extend_path(__path__, __name__) __path__ = __import__("pkg
  • path__, __name__) __path__ = __import__("pkgutil").extend_path(__path__, __name__) # coding=utf-8 # ---------
✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: microsoft.com

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository Azure/azure-sdk-for-python appears legitimate

⚠ Maintainer History score 2.0

1 maintainer concern(s) found

  • Author "Microsoft Corporation" appears to have only 1 package on PyPI (new or inactive account)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with azure-mgmt-kusto 
Your task is to develop a Python-based command-line tool that manages Azure Kusto clusters and databases using the 'azure-mgmt-kusto' library. This tool should allow users to perform basic operations such as creating, updating, and deleting Kusto clusters and databases, as well as retrieving details about existing resources. Additionally, it should support listing all available clusters and databases within a specified resource group or subscription.

The tool should follow these steps:
1. Authenticate the user to their Azure account.
2. Provide a menu-driven interface where users can select from various management actions.
3. For each action, validate inputs and handle exceptions gracefully.
4. Display results in a clear and readable format.

Suggested Features Include:
- Creating a new Kusto cluster with optional parameters like location, sku tier, and capacity.
- Updating an existing Kusto cluster's properties, such as its SKU tier.
- Deleting a Kusto cluster by name.
- Listing all Kusto clusters within a given subscription or resource group.
- Creating a new database within a specified Kusto cluster, allowing for the configuration of data retention policy.
- Updating an existing database's properties, such as modifying its data retention policy.
- Deleting a database from a Kusto cluster.
- Retrieving detailed information about a specific Kusto cluster or database.

The 'azure-mgmt-kusto' package will be utilized to interact with Azure's REST API endpoints for managing Kusto clusters and databases. Your implementation should demonstrate proficiency in using this library to perform CRUD (Create, Read, Update, Delete) operations on Azure resources.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!