agentics-companion
maintainer Connor
· 0 votes
· scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged
The package downloads a prebuilt binary from the project's own official repository domain, which is plausibly controlled by the maintainer; while the host is not a common forge, it matches the project's website and the binary is installed directly without obfuscation or additional runtime behavior, making this a typical AUR package for a closed-source or self-hosted project.
Triggered rules
LOW
AI review downgraded a static finding
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a prebuilt binary from the project's own official repository domain, which is plausibly controlled by the maintainer; while the host is not a common forge, it matches the project's website and the binary is installed directly without obfuscation or additional runtime behavior, making this a typical AUR package for a closed-source or self-hosted project.
1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM
source=() URL on a non-standard host
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:12
source=("agentics-companion-0.1.75-x86_64::https://repo.agentics.co.za/x86_64/agentics-companion-0.1.75-x86_64")
PKGBUILD
1 offending line(s) highlighted
1
# Maintainer: Connor Etherington <connor@agentics.co.za>
2
# ---
3
pkgname=agentics-companion
4
pkgver=0.1.75
5
pkgrel=1
6
pkgdesc="Agentics Companion - the local relay and voice daemon that links every Agentics surface to the hub"
7
arch=('x86_64')
8
url="https://agentics.co.za"
9
license=('custom')
10
depends=()
11
options=('!strip' '!debug')
12
source=("agentics-companion-0.1.75-x86_64::https://repo.agentics.co.za/x86_64/agentics-companion-0.1.75-x86_64")
13
sha512sums=('b7a8738f2474eeef66d5a9bd55600b852be9d9092fbf53cef58b14f202df177116fe9ad815cc4ebf08a8bcd9593e1b7678594bbe0c140ad6479d43ce03db92d7')
14
15
package() {
16
install -Dm755 "$srcdir/agentics-companion-0.1.75-x86_64" "$pkgdir/usr/bin/agentics-companion"
17
}
18
Changes since previous scan
--- PKGBUILD @ 2026-07-29 00:25+++ PKGBUILD @ 2026-08-03 00:08@@ -1,7 +1,7 @@ # Maintainer: Connor Etherington <connor@agentics.co.za> # --- pkgname=agentics-companion-pkgver=0.1.67+pkgver=0.1.75 pkgrel=1 pkgdesc="Agentics Companion - the local relay and voice daemon that links every Agentics surface to the hub" arch=('x86_64')@@ -9,10 +9,10 @@ license=('custom') depends=() options=('!strip' '!debug')-source=("agentics-companion-0.1.67-x86_64::https://repo.agentics.co.za/x86_64/agentics-companion-0.1.67-x86_64")-sha512sums=('70b45ebb605adda8c7356ff849648704bf11dff9248515730b7b0d77dd7a2ce8fb722097687e3d777073b0ee1c1d1e26ddda6dfc052de343528c89476286c767')+source=("agentics-companion-0.1.75-x86_64::https://repo.agentics.co.za/x86_64/agentics-companion-0.1.75-x86_64")+sha512sums=('b7a8738f2474eeef66d5a9bd55600b852be9d9092fbf53cef58b14f202df177116fe9ad815cc4ebf08a8bcd9593e1b7678594bbe0c140ad6479d43ce03db92d7') package() {- install -Dm755 "$srcdir/agentics-companion-0.1.67-x86_64" "$pkgdir/usr/bin/agentics-companion"+ install -Dm755 "$srcdir/agentics-companion-0.1.75-x86_64" "$pkgdir/usr/bin/agentics-companion" } Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-08-03 00:08:14 | LOW | 2 |
| 2026-08-02 00:16:08 | LOW | 2 |
| 2026-08-01 00:11:18 | LOW | 2 |
| 2026-07-31 00:14:10 | LOW | 2 |
| 2026-07-30 00:17:23 | LOW | 2 |
| 2026-07-29 11:11:22 | MEDIUM | 1 |
| 2026-07-29 00:25:53 | MEDIUM | 3 |
| 2026-07-28 00:07:28 | MEDIUM | 3 |
| 2026-07-27 00:24:32 | MEDIUM | 3 |
| 2026-07-26 00:07:32 | MEDIUM | 3 |
| 2026-07-25 00:13:44 | MEDIUM | 3 |
| 2026-07-24 00:02:28 | MEDIUM | 3 |
| 2026-07-23 00:14:47 | MEDIUM | 3 |
| 2026-07-22 00:29:32 | MEDIUM | 3 |
| 2026-07-21 00:24:15 | MEDIUM | 3 |
| 2026-07-20 00:19:49 | MEDIUM | 3 |
| 2026-07-19 00:17:08 | MEDIUM | 3 |
| 2026-07-18 00:14:48 | MEDIUM | 3 |
| 2026-07-17 00:06:16 | MEDIUM | 3 |
| 2026-07-16 00:05:41 | MEDIUM | 3 |