97OUT OF 100
TrustedHigh trustStatic read

microsoft/JARVIS

JARVIS is a well-documented research project from Microsoft. The flagged network activity in the documentation refers to standard local API interaction examples for the project's server mode, which is explicitly described in the README. No malicious behavior, obfuscation, or unauthorized credential access was observed in the static scan. Full runtime behavior was not executed in a sandbox on this pass.

Repository size
41674 KB
Packages
0
Stars
25217
Created
2023-03-28
Reputation signals
microsoft avatar
Microsoft
@microsoft
Account age12 yr 8 mo
Public repos8.3K
Forks2.2k
Community sentiment90

Positive

Code & behavior signals
Documented local API usage
LowBehavior

README documentation contains curl examples for interacting with a local server endpoint (localhost:8004). This is consistent with the project's declared server mode functionality.

Per-package scoring
Final verdict

No malicious behavior in our static read, and reputation is strong. Runtime was not executed in a sandbox on this pass, so this is a static-read clearance, not a guarantee.

What we could not verify
—Full runtime behavior (this repo was not executed in a sandbox on this pass)
—Every conditional and time-triggered branch
—Behavior under real credentials (no sandbox was run on this pass)
End-to-end logs
Clone
›Cloned repository microsoft/JARVIS at commit 7624cf388b47334ff8a0868e7d862dde18cfda86
Static scan
›Scanned 15 files for malicious patterns
›No obfuscation, embedded secrets, or unauthorized network calls detected
Read
›Verified README documentation against flagged curl snippets
›Confirmed snippets are instructional examples for local server deployment
Reputation
›Owner verified as Microsoft
›High community engagement and star count
Score
›Score computed by formula: 97/100 (deterministic, code-driven)
›-3 [code] model_findings: 1 code/behavior finding(s) reported by the read model.
›+8 [reputation] established_owner: Owner account is established (older than a year with multiple public repos).
›+6 [reputation] many_stars: Strong community signal (25,217 stars).
›+4 [reputation] good_sentiment: Positive community sentiment (90/100).
Auto-published at clauderabbit.in/microsoft/JARVIS · re-checked when the repo changes