autoflix-cli

v0.6.0 suspicious
7.0
High Risk

Watch movies, series, and anime in multiple languages (FR, EN, and more) directly from your terminal.

🤖 AI Analysis

Final verdict: SUSPICIOUS

The package exhibits behaviors that are unusual for a standard CLI tool, including attempts to mimic browser behavior and execute decoded JavaScript, which may indicate obfuscation or evasion techniques.

  • High network and shell execution risks
  • Potential obfuscation of code
Per-check LLM notes
  • Network: The network calls include HTTP POST and GET requests which seem typical for fetching data from APIs or web services, but the use of 'impersonate' suggests an attempt to mimic browser behavior, which might be unusual for a CLI tool unless it's interacting with services that require such headers.
  • Shell: Direct shell execution via os.system and subprocess.run can pose risks if not properly sanitized, especially when dealing with user inputs, indicating potential vulnerabilities for injection attacks or unintended command executions.
  • Obfuscation: The observed pattern suggests an attempt to decode and execute JavaScript from a web page, which could be obfuscating potentially harmful actions.
  • Credentials: No clear patterns indicative of credential harvesting were detected.
  • Metadata: Low activity and lack of detailed metadata suggest potential low effort or new maintainer.

📦 Package Quality Overall: Low (4.6/10)

○ Low Test Suite 1.0

No test suite detected

  • No test files or test-runner configuration detected
◈ Medium Documentation 5.0

Some documentation present

  • Detailed PyPI description (3642 chars)
○ Low Contributing Guide 2.0

No contributing guide or governance files found

  • No CONTRIBUTING, CODE_OF_CONDUCT, or governance files found
◈ Medium Type Annotations 7.0

Partial type annotation coverage

  • Type checker (mypy / pyright / pytype) referenced in project
  • 98 type-annotated function signatures detected in source
✦ High Multiple Contributors 8.0

Active multi-contributor project

  • 3 unique contributor(s) across 100 commits in PaulExplorer/autoflix-cli
  • Small but multi-author team (3–4 contributors)

🔬 Heuristic Checks

⚠ Outbound Network Calls score 9.0

Found 6 network call pattern(s)

  • kage_name}/json" with urllib.request.urlopen(url, timeout=2) as response: data = json
  • try: response = requests.post( self.url, json={"query": qu
  • " try: response = requests.get(url, impersonate="chrome", timeout=5) response.raise
  • ort tempfile r = requests.get(subtitle_url, timeout=10, impersonate="chrome")
  • sion_cache: session = requests.Session(impersonate="chrome") session.curl_options.update(DN
  • le)}.json" r_series = requests.get(url_series, timeout=5, impersonate="chrome").json()
⚠ Code Obfuscation score 2.0

Found 1 obfuscation pattern(s)

  • t(" /")[0] link = base64.b64decode(li.attrs["onclick"].split("'")[1].split("'")[0])
⚠ Shell / Subprocess Execution score 8.0

Found 4 shell execution pattern(s)

  • r the terminal screen.""" os.system("cls" if os.name == "nt" else "clear") def get_user_input(
  • itle_path}") subprocess.run(cmd, check=True) print_success("Playback com
  • e_path}") subprocess.run(cmd, check=True) else: #
  • ream_url) subprocess.run(cmd, check=True) print_success("Playback co
✓ Credential Harvesting

No credential harvesting patterns detected

✓ Typosquatting

No typosquatting candidates detected

✓ Registered Email Domain

No author email provided

✓ Suspicious Page Links

All external links appear legitimate

✓ Git Repository History

Repository PaulExplorer/autoflix-cli appears legitimate

⚠ Maintainer History score 4.0

2 maintainer concern(s) found

  • Author "PaulExplorer" appears to have only 1 package on PyPI (new or inactive account)
  • Package has no PyPI classifiers (low effort / metadata quality)
✓ Known CVE Vulnerabilities

No known vulnerabilities found in OSV database.

💡 AI App Starter Prompt

Use this prompt to build a project with autoflix-cli 
Your task is to create a command-line interface (CLI) application using the 'autoflix-cli' package, which allows users to watch movies, series, and anime directly from their terminal. Your application should be named 'CinemaTerm'. CinemaTerm will not only stream content but also offer additional features to enhance the user experience.

Here are the key functionalities that CinemaTerm should support:
1. **Content Search**: Users should be able to search for movies, series, and anime titles by name, genre, year of release, and language. The application should display a list of matching results with brief details such as title, genre, year, and synopsis.
2. **Stream Content**: Once a user selects a specific movie, series, or episode, CinemaTerm should stream it directly in the terminal window. Support for multiple languages should be available based on what's offered by the 'autoflix-cli' package.
3. **User Preferences**: Allow users to set preferences like default language, preferred genres, and even a dark mode for the CLI interface. These settings should persist across sessions.
4. **Interactive Menu System**: Implement a menu-driven system where users can navigate through different options like searching, streaming, setting preferences, and exiting the application.
5. **Feedback Mechanism**: After watching a movie or series, users should have the option to rate the content and provide feedback. This feedback should be stored locally and could be used to suggest similar content in future searches.
6. **Help and Documentation**: Include a help section within the application that explains how to use each feature, common commands, and any shortcuts available.

To achieve these functionalities, you will need to utilize the 'autoflix-cli' package effectively. Start by exploring its documentation to understand how to integrate it into your CLI application. Consider how to structure your code to ensure it's modular and easy to maintain. Remember to test each feature thoroughly before finalizing the application.

💬 Discussion Feed

Leave a comment

No discussion yet. Be the first to share your thoughts!