agentic_mcp_server

v0.1.1 suspicious
6.0
Medium Risk

A Model Context Protol(MCP) built for context exchange between LLM agents and external services.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package has moderate risk due to potential shell execution and low maintainer activity, without clear indications of malicious intent.

  • Shell risk detected
  • Low maintainer activity
Per-check LLM notes
  • Network: No network calls were detected, which is normal unless the package requires external services.
  • Shell: The presence of shell execution patterns may indicate the package performs system operations, but could also suggest potential security risks if not properly managed.
  • Obfuscation: No obfuscation patterns detected, indicating low risk of malicious activity.
  • Credentials: No credential harvesting patterns detected, indicating low risk of unauthorized access.
  • Metadata: The package shows signs of low maintainer activity and poor metadata quality, raising some suspicion but not conclusive evidence of malice.

🔬 Heuristic Checks

✓ Outbound Network Calls

No suspicious network call patterns found

✓ Code Obfuscation

No obfuscation patterns detected

⚠ Shell / Subprocess Execution score 10.0

Found 5 shell execution pattern(s)

  • s try: result = subprocess.run(command, shell=True, check=True, stdout=subprocess.PIPE, std
  • s try: result = subprocess.run(['python', '-c', code], check=True, stdout=subprocess.PIPE,
  • s try: result = subprocess.run(['python', file], check=True, stdout=subprocess.PIPE, stderr
  • rt subprocess result = subprocess.run( ['findstr', pattern, file], stdout=subpro
  • ult = subprocess.run(command, shell=True, check=True, stdout=subprocess.PIPE, stderr=subprocess.PIPE
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

No GitHub repository linked

  • No GitHub repository link found
⚠ Maintainer History score 6.0

3 maintainer concern(s) found

  • Author name is missing or very short
  • Author "" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with agentic_mcp_server 
Build a simple Python application using the agentic_mcp_server package to demonstrate its core features.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!