aibox-bin (CLEAN)

Triggered rules

Clean AI review downgraded a static finding llm_review

The static rules flagged this LOW, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it CLEAN (confidence 95%): The package downloads a prebuilt binary from the project's official GitHub releases, which is a trusted source; the binary is installed directly without obfuscation or remote code execution, and the software's functionality aligns with its description.

1 higher static finding superseded - not the current verdict (shown for transparency)

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

PKGBUILD

      1pkgname=aibox-bin
    
      2pkgver=2.1.1
    
      3pkgrel=1
    
      4pkgdesc="AI in a box. Run Claude in a secure microvm environment."
    
      5arch=('x86_64')
    
      6url="https://the127.github.io/aibox/"
    
      7license=('Apache-2.0')
    
      8depends=('qemu-system-x86' 'virtiofsd' 'bubblewrap')
    
      9provides=(aibox)
    
      10conflicts=(aibox)
    
      11
    
      12source=("${pkgname}-${pkgver}.tar.gz::https://github.com/The127/aibox/releases/download/v${pkgver}/aibox_${pkgver}_linux_amd64.tar.gz")
    
      13
    
      14sha256sums=('fe92f134f088ef77456990672a97e26a157f97f7c3f8af83df0e97e7eb2f541a')
    
      15
    
      16package() {
    
      17    cd "${srcdir}"
    
      18    install -Dm 755 aibox -t "${pkgdir}/usr/bin"
    
      19    install -Dm 644 README.md -t "${pkgdir}/usr/share/doc/${pkgname}"
    
      20    install -Dm 644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
    
      21}
    
      22
    
      23# vim:set ts=4 sw=4 et:
    
      24

Changes since previous scan

--- PKGBUILD @ 2026-10-14 00:06
+++ PKGBUILD @ 2026-10-22 00:13
@@ -1,5 +1,5 @@
 pkgname=aibox-bin
-pkgver=2.0.1
+pkgver=2.1.1
 pkgrel=1
 pkgdesc="AI in a box. Run Claude in a secure microvm environment."
 arch=('x86_64')
@@ -11,13 +11,13 @@
 
 source=("${pkgname}-${pkgver}.tar.gz::https://github.com/The127/aibox/releases/download/v${pkgver}/aibox_${pkgver}_linux_amd64.tar.gz")
 
-sha256sums=('71fa6ba468b1b79a834e8eb2e770bbbfb2c11c1c61216f927063aa89ad059394')
+sha256sums=('fe92f134f088ef77456990672a97e26a157f97f7c3f8af83df0e97e7eb2f541a')
 
 package() {
-    cd "$pkgname-$pkgver"
-    install -Dm 755 aibox -t "$pkgdir/usr/bin"
-    install -Dm 644 README.md -t "$pkgdir/usr/share/doc/$pkgname"
-    install -Dm 644 LICENSE -t "$pkgdir/usr/share/licenses/$pkgname"
+    cd "${srcdir}"
+    install -Dm 755 aibox -t "${pkgdir}/usr/bin"
+    install -Dm 644 README.md -t "${pkgdir}/usr/share/doc/${pkgname}"
+    install -Dm 644 LICENSE -t "${pkgdir}/usr/share/licenses/${pkgname}"
 }
 
 # vim:set ts=4 sw=4 et:

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-22 00:13:10	Clean	2
2026-10-21 23:33:14	Low	1
2026-10-14 00:06:47	Clean	2
2026-10-13 23:18:21	Low	1
2026-10-13 21:18:20	Low	1