agent-framework-mistral

v1.0.0a260604 suspicious
5.0
Medium Risk

Mistral AI integration for Microsoft Agent Framework.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package shows minimal risk indicators such as no network calls, shell executions, or obfuscations. However, it is flagged due to its recent upload, single version release, and the maintainer's limited activity, suggesting potential supply-chain risks.

  • Recent upload
  • Single version released
  • Limited maintainer activity
Per-check LLM notes
  • Network: No network calls detected, which is normal if the package does not require external communications.
  • Shell: No shell execution patterns detected, indicating no direct system command execution from the package.
  • Obfuscation: No obfuscation patterns detected, indicating low risk.
  • Credentials: No credential harvesting patterns detected, indicating low risk.
  • Metadata: The package is suspicious due to its recent upload, single version release, and the maintainer's limited activity on PyPI.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

✓ Shell / Subprocess Execution

No shell execution patterns detected

✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

Email domain looks legitimate: microsoft.com>

✓ Suspicious Page Links

All external links appear legitimate

⚠ Git Repository History score 3.0

GitHub API error: 403

  • GitHub API error: 403
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Only one version has ever been released — brand new package
  • Package uploaded less than 24 hours ago (2026-06-04T23:55:56.000Z)
  • Author "Microsoft" appears to have only 1 package on PyPI (new or inactive account)

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!