pypi Python analyzed 0.1.0

amiami-api

v0.1.0

pypi

Unofficial AmiAmi API — Python library and local MCP server for Japan's largest hobby retailer

Drift inferred · capture-to-capture

No drift recorded — single capability capture; advisories appear once its surface changes.

capabilities 3 tools

transport stdio · http counts 3 tools · 0 res · 0 prompts permission surface via code analysis

skills & danger signals pypi-sdist

prompt-surface shipped agent-instruction files + hidden-content / dangerous-code findings — quoted from the analyzed source

analyzed v0.1.0 · analyzer v33 · 2w ago

dynamic code execution __import__() amiami_api-0.1.0/tests/test_transport_and_urls.py :312 source = __import__(

code evidence v0.1.0 · pypi-sdist

evidence-backed findings quoted directly from the published source artifact — not inferred

code files: 20

fs amiami_api-0.1.0/src/amiami_api/cache.py :14 from pathlib import Path
fs (weak) amiami_api-0.1.0/tests/conftest.py :9 from pathlib import Path
fs (weak) amiami_api-0.1.0/tests/test_transport_and_urls.py :315 text = open(source, encoding="utf-8").read()

net amiami_api-0.1.0/src/amiami_api/transport.py :42 from curl_cffi import requests as curl_requests
net amiami_api-0.1.0/src/amiami_api/urls.py :15 from urllib.parse import urlencode
net (weak) amiami_api-0.1.0/tests/test_live.py :17 from curl_cffi import requests as curl_requests
net (weak) amiami_api-0.1.0/tests/test_transport_and_urls.py :316 for banned in ("import httpx", "import requests", "curl_cffi", "urllib.request"):

secrets amiami_api-0.1.0/src/amiami_api/server.py :33 user_key=os.environ.get("AMIAMI_API_USER_KEY", DEFAULT_USER_KEY),