attackgraph-bin

LOW

maintainer 5t4l1n 0 votes scanned 2026-10-17 00:21:55.226236

View on AUR

Why flagged

The package installs a prebuilt AppImage from the project's official GitHub release, which is a common and acceptable practice for AUR packages; the source is verifiable, checksummed, and the AppImage is extracted to install individual components, posing no additional risk beyond standard binary packages.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package installs a prebuilt AppImage from the project's official GitHub release, which is a common and acceptable practice for AUR packages; the source is verifiable, checksummed, and the AppImage is extracted to install individual components, posing no additional risk beyond standard binary packages.

PKGBUILD

      1# Maintainer: 0x5t4l1n <stalin@ideaboxai.com>
    
      2pkgname=attackgraph-bin
    
      3pkgver=1.0.0
    
      4pkgrel=1
    
      5pkgdesc="Graph-first application security testing platform — crawl, graph, analyze, report"
    
      6arch=('x86_64')
    
      7url="https://github.com/0x5t4l1n/Attackgraph"
    
      8license=('AGPL-3.0-only')
    
      9depends=(
    
      10    'gtk3'
    
      11    'webkit2gtk-4.1'
    
      12    'libsoup3'
    
      13    'gdk-pixbuf2'
    
      14    'cairo'
    
      15    'pango'
    
      16    'atk'
    
      17    'at-spi2-atk'
    
      18    'hicolor-icon-theme'
    
      19)
    
      20optdepends=(
    
      21    'ollama: local AI assistant without an API key'
    
      22)
    
      23provides=("attackgraph=$pkgver")
    
      24conflicts=('attackgraph')
    
      25options=('!strip')
    
      26noextract=("AttackGraph_${pkgver}_amd64.AppImage")
    
      27
    
      28source_x86_64=(
    
      29    "AttackGraph_${pkgver}_amd64.AppImage::https://github.com/0x5t4l1n/Attackgraph/releases/download/v${pkgver}/AttackGraph_${pkgver}_amd64.AppImage"
    
      30)
    
      31sha256sums_x86_64=(
    
      32    '390abcf3aa5a3c73c3499a2e5db48452de10e6f51e4207dcc0a679bced92f5ef'
    
      33)
    
      34
    
      35prepare() {
    
      36    chmod +x "${srcdir}/AttackGraph_${pkgver}_amd64.AppImage"
    
      37    cd "${srcdir}"
    
      38    ./AttackGraph_${pkgver}_amd64.AppImage --appimage-extract
    
      39}
    
      40
    
      41package() {
    
      42    cd "${srcdir}/squashfs-root"
    
      43
    
      44    # Main Tauri binary
    
      45    install -Dm755 usr/bin/attackgraph \
    
      46        "${pkgdir}/usr/bin/attackgraph"
    
      47
    
      48    # Bundled Python backend (PyInstaller binary, no Python required)
    
      49    install -Dm755 usr/bin/attackgraph-backend \
    
      50        "${pkgdir}/usr/lib/attackgraph/attackgraph-backend"
    
      51
    
      52    # Desktop entry (with corrected Categories)
    
      53    install -Dm644 /dev/stdin \
    
      54        "${pkgdir}/usr/share/applications/attackgraph.desktop" << 'DESKTOP'
    
      55[Desktop Entry]
    
      56Version=1.0
    
      57Type=Application
    
      58Name=AttackGraph
    
      59GenericName=Application Security Tester
    
      60Comment=AttackGraph — Intelligent Web Application Attack-Path Mapper
    
      61Exec=attackgraph
    
      62Icon=attackgraph
    
      63Terminal=false
    
      64Categories=Security;Network;Development;
    
      65Keywords=security;pentest;scanner;graph;attack;appsec;
    
      66StartupWMClass=attackgraph
    
      67StartupNotify=true
    
      68DESKTOP
    
      69
    
      70    # Icons
    
      71    install -Dm644 usr/share/icons/hicolor/32x32/apps/attackgraph.png \
    
      72        "${pkgdir}/usr/share/icons/hicolor/32x32/apps/attackgraph.png"
    
      73    install -Dm644 usr/share/icons/hicolor/128x128/apps/attackgraph.png \
    
      74        "${pkgdir}/usr/share/icons/hicolor/128x128/apps/attackgraph.png"
    
      75    # 256x256 from root PNG (higher quality)
    
      76    install -Dm644 AttackGraph.png \
    
      77        "${pkgdir}/usr/share/icons/hicolor/256x256/apps/attackgraph.png"
    
      78    install -Dm644 AttackGraph.png \
    
      79        "${pkgdir}/usr/share/pixmaps/attackgraph.png"
    
      80
    
      81    # License
    
      82    install -Dm644 /dev/stdin \
    
      83        "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE" << 'EOF'
    
      84MIT License — see https://github.com/0x5t4l1n/Attackgraph/blob/main/LICENSE
    
      85EOF
    
      86}
    
      87

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 00:21:55	Low	2
2026-10-16 00:12:47	Low	2
2026-10-15 00:28:05	Low	2
2026-10-14 00:06:47	Low	2
2026-10-13 00:23:45	Low	2
2026-10-12 00:18:51	Low	2
2026-10-11 05:10:24	Low	2