autogen

Decoded base64 content: ��?��#y�j�h���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ����+mz��_��l��"�׫

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: r��z�l��(�����l

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��?��#y�j�h���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ��?��#y�j�h���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ����+mz��_��l��"�׫

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: r��z�l��(�����l

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: ����+mz��_��l��"�׫

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Decoded base64 content: r��z�l��(�����l

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Dynamic code execution via exec()

Detected by automated pattern matching (rule SC-003) with medium confidence. May be a false positive.

    18: version = {}
    19: with open(os.path.join(here, "autogen/version.py")) as fp:
>>> 20:     exec(fp.read(), version)
    21: __version__ = version["__version__"]
    22: 

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    531: 
    532: class TestGetPowerShellCommand:
>>> 533:     @patch("subprocess.run")
    534:     def test_get_powershell_command_powershell(self, mock_subprocess_run):
    535:         # Set up the mock to return a successful result for 'powershell'

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    539:         assert get_powershell_command() == "powershell"
    540: 
>>> 541:     @patch("subprocess.run")
    542:     def test_get_powershell_command_pwsh(self, mock_subprocess_run):
    543:         # Set up the mock to return a successful result for 'pwsh'

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    548:         assert get_powershell_command() == "pwsh"
    549: 
>>> 550:     @patch("subprocess.run")
    551:     def test_get_powershell_command_not_found(self, mock_subprocess_run):
    552:         mock_subprocess_run.side_effect = [FileNotFoundError, FileNotFoundError]

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    554:             get_powershell_command()
    555: 
>>> 556:     @patch("subprocess.run")
    557:     def test_get_powershell_command_no_permission(self, mock_subprocess_run):
    558:         mock_subprocess_run.side_effect = [PermissionError, FileNotFoundError]

Decoded base64 content: M�-�O��J��*&���

Detected by automated pattern matching (rule DO-BAS) with medium confidence. May be a false positive.

Subprocess execution

Detected by automated pattern matching (rule SC-001) with medium confidence. May be a false positive.

    58:     def test_sensitive_output_is_sanitized(self):
    59:         # Run pytest for the sensitive tests and capture the output
>>> 60:         result = subprocess.run(
    61:             [
    62:                 "pytest",

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    83: <p align="center">
    84:   <!-- The image URL points to the GitHub-hosted content, ensuring it displays correctly on the PyPI website.-->
>>> 85:   <img src="https://raw.githubusercontent.com/ag2ai/ag2/27b37494a6f72b1f8050f6bd7be9a7ff232cf749/website/static/img/ag2.svg" width="150" title="hover text">
    86: 
    87:   <br>

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    3: <p align="center">
    4:   <!-- The image URL points to the GitHub-hosted content, ensuring it displays correctly on the PyPI website.-->
>>> 5:   <img src="https://raw.githubusercontent.com/ag2ai/ag2/27b37494a6f72b1f8050f6bd7be9a7ff232cf749/website/static/img/ag2.svg" width="150" title="hover text">
    6: 
    7:   <br>

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    83: <p align="center">
    84:   <!-- The image URL points to the GitHub-hosted content, ensuring it displays correctly on the PyPI website.-->
>>> 85:   <img src="https://raw.githubusercontent.com/ag2ai/ag2/27b37494a6f72b1f8050f6bd7be9a7ff232cf749/website/static/img/ag2.svg" width="150" title="hover text">
    86: 
    87:   <br>

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.5 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (5.2 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    119: 
    120:     # Visit a plain-text file
>>> 121:     response = requests.get(PLAIN_TEXT_URL)
    122:     response.raise_for_status()
    123:     expected_results = response.text

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    127: 
    128:     # Directly download an image, and compute its md5
>>> 129:     response = requests.get(IMAGE_URL, stream=True)
    130:     response.raise_for_status()
    131:     expected_md5 = hashlib.md5(response.raw.read()).hexdigest()

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    78:     import requests
    79:     from bs4 import BeautifulSoup
>>> 80:     response = requests.get(url)
    81:     soup = BeautifulSoup(response.text, "html.parser")
    82:     title = soup.find("title").text

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    103:     import requests
    104:     from bs4 import BeautifulSoup
>>> 105:     response = requests.get(url)
    106:     soup = BeautifulSoup(response.text, "html.parser")
    107:     title = soup.find("title").text

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    129:        import requests
    130:        from bs4 import BeautifulSoup
>>> 131:        response = requests.get(url)
    132:        soup = BeautifulSoup(response.text, "html.parser")
    133:        title = soup.find("title").text

Python requests library HTTP call

Detected by automated pattern matching (rule NS-001) with medium confidence. May be a false positive.

    148:    import requests
    149:    from bs4 import BeautifulSoup
>>> 150:    response = requests.get(url)
    151:    soup = BeautifulSoup(response.text, "html.parser")
    152:    title = soup.find("title").text

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.6 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    94:     # mock num_tokens_from_gpt_image function
    95:     base64_encoded_image = (
>>> 96:         "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12P4"
    97:         "//8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg=="
    98:     )

Possible Base64-encoded payload (long encoded string)

Detected by automated pattern matching (rule OB-001) with medium confidence. May be a false positive.

    95:     base64_encoded_image = (
    96:         "data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAUAAAAFCAYAAACNbyblAAAAHElEQVQI12P4"
>>> 97:         "//8/w38GIAXDIBKE0DHxgljNBAAO9TXL0Y4OHwAAAABJRU5ErkJggg=="
    98:     )
    99: 

High-entropy string (4.7 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.

High-entropy string (4.8 bits/char) — possible encoded payload

Detected by automated pattern matching (rule EN-001) with medium confidence. May be a false positive.