assistant

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

• PKGBUILD:14 source=("${pkgname}-${pkgver}.deb::https://lk2.xn--80akicokc0aablc.xn--p1ai/WebApi/Platforms/Download/${_pkg}")

An AI model (anthropic/claude-4.6-sonnet-20260217) reviewed this and agrees it is MEDIUM (confidence 72%): The PKGBUILD downloads a prebuilt binary .deb package from a Punycode-encoded Russian domain (xn--80akicokc0aablc.xn--p1ai decodes to a Cyrillic domain) via a numeric ID endpoint with no version pinning in the URL path. The software 'Assistant' is a legitimate remote-access product from SAFIB LTD, a Russian software company, and the Punycode domain is simply their official site rendered in IDN form — this is not obfuscation in a malicious sense. However, the package installs a prebuilt proprietary binary from a vendor-controlled download endpoint (identified only by a numeric ID '1375') with only an MD5 checksum for integrity. MD5 is cryptographically broken for collision resistance. The binary installs a systemd service, meaning it runs with elevated persistence. The combination of: (1) prebuilt proprietary binary, (2) weak MD5-only integrity check, (3) opaque numeric download URL that could be silently updated server-side, and (4) a systemd service installation constitutes a genuine supply-chain concern. The cheaper model's 'obfuscated domain' concern is a false positive (it's just IDN), but the real medium-severity concern is the prebuilt binary from a non-mainstream vendor with weak integrity verification and persistent execution.