aicoworker-bin

LOW

maintainer thienandangthanh 0 votes scanned 2026-10-08 18:09:39.829306

View on AUR

Why flagged

The package installs a prebuilt official binary from the project's GitHub releases, which is normal for AUR packages; the low severity is due to the binary nature and unverifiable checksum source, but it comes from the legitimate project host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt official binary from the project's GitHub releases, which is normal for AUR packages; the low severity is due to the binary nature and unverifiable checksum source, but it comes from the legitimate project host.

PKGBUILD

      1# Maintainer: Thien An Dang Thanh <thienandangthanh at gmail dot com>
    
      2pkgname=aicoworker-bin
    
      3pkgver=2026.8.3
    
      4pkgrel=1
    
      5pkgdesc='Graphical AI assistant powered by OpenClaw (official binary)'
    
      6arch=('x86_64')
    
      7url='https://github.com/Neurons-AI/aicoworker'
    
      8license=('LicenseRef-PolyForm-Perimeter-1.0.0' 'MIT' 'BSD-3-Clause')
    
      9depends=(
    
      10  'alsa-lib' 'at-spi2-core' 'bubblewrap' 'cairo' 'dbus' 'expat'
    
      11  'glib2' 'glibc' 'gtk3' 'libcups' 'libgcc' 'libgomp' 'libnotify'
    
      12  'libstdc++' 'libx11' 'libxcb' 'libxcomposite' 'libxdamage' 'libxext'
    
      13  'libxfixes' 'libxkbcommon' 'libxrandr' 'libxss' 'libxtst' 'mesa'
    
      14  'nspr' 'nss' 'pango' 'socat' 'systemd-libs' 'util-linux-libs'
    
      15  'vulkan-icd-loader' 'xdg-utils'
    
      16)
    
      17optdepends=('libappindicator: tray integration on desktops using AppIndicator')
    
      18makedepends=('patchelf')
    
      19provides=("aicoworker=$pkgver")
    
      20conflicts=('aicoworker')
    
      21# Preserve upstream prebuilt runtimes, native modules, and their debug data.
    
      22options=('!strip' '!debug')
    
      23source=("https://github.com/Neurons-AI/aicoworker/releases/download/v${pkgver}/AICoworker-${pkgver}-linux-amd64.deb")
    
      24noextract=("AICoworker-${pkgver}-linux-amd64.deb")
    
      25sha256sums=('ac28a6a7ab729f6bab7563f59bd8f2f8b0645cdc878805cf3b4aadfe5c462b84')
    
      26
    
      27prepare() {
    
      28  bsdtar -xf "AICoworker-${pkgver}-linux-amd64.deb" data.tar.xz
    
      29}
    
      30
    
      31package() {
    
      32  bsdtar -xf "$srcdir/data.tar.xz" -C "$pkgdir"
    
      33
    
      34  # Keep sibling-library lookup without searching the current working directory.
    
      35  local runtime library
    
      36  for runtime in \
    
      37    "$pkgdir/opt/AICoworker/resources/app.asar.unpacked/node_modules/node-llama-cpp/llama/localBuilds" \
    
      38    "$pkgdir/opt/AICoworker/resources/openclaw/node_modules/node-llama-cpp/llama/localBuilds"; do
    
      39    for library in "$runtime"/linux-x64*/Release/*.so; do
    
      40      if [[ $(patchelf --print-rpath "$library") == "\$ORIGIN:" ]]; then
    
      41        patchelf --set-rpath "\$ORIGIN" "$library"
    
      42      fi
    
      43    done
    
      44  done
    
      45
    
      46  install -d "$pkgdir/usr/bin"
    
      47  ln -s /opt/AICoworker/aicoworker "$pkgdir/usr/bin/aicoworker"
    
      48
    
      49  # Repair the upstream desktop file's unescaped multiline Comment value.
    
      50  sed -i '/^Comment=/c\Comment=AI Assistant powered by OpenClaw' \
    
      51    "$pkgdir/usr/share/applications/aicoworker.desktop"
    
      52  sed -i '/^OpenClaw Gateway to provide intelligent automation and assistance$/d; /^across multiple messaging platforms\.$/d' \
    
      53    "$pkgdir/usr/share/applications/aicoworker.desktop"
    
      54
    
      55  # Chromium's setuid sandbox fallback requires a root-owned mode-4755 helper.
    
      56  chmod 4755 "$pkgdir/opt/AICoworker/chrome-sandbox"
    
      57
    
      58  install -Dm644 "$pkgdir/opt/AICoworker/resources/app-source/LICENSE" \
    
      59    "$pkgdir/usr/share/licenses/$pkgname/LICENSE"
    
      60  install -m644 "$pkgdir/opt/AICoworker/LICENSE.electron.txt" \
    
      61    "$pkgdir/usr/share/licenses/$pkgname/LICENSE.electron.txt"
    
      62  install -m644 "$pkgdir/opt/AICoworker/LICENSES.chromium.html" \
    
      63    "$pkgdir/usr/share/licenses/$pkgname/LICENSES.chromium.html"
    
      64}
    
      65

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-08 18:09:39	Low	2