chatwithwork-local-agent-git

LOW

maintainer crmne 0 votes scanned 2026-09-25 09:11:17.574095

View on AUR

Why flagged

The package builds from a public Git repository with a SKIP'd checksum, which is common for git sources, and compiles a Rust binary from the project's own code; no untrusted prebuilt binaries or remote code execution.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from a public Git repository with a SKIP'd checksum, which is common for git sources, and compiles a Rust binary from the project's own code; no untrusted prebuilt binaries or remote code execution.

PKGBUILD

      1# Maintainer: Carmine Paolino <carmine@paolino.me>
    
      2pkgname=chatwithwork-local-agent-git
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="Chat with Work Local Agent: share folders with Chat with Work through four read-only tools (development version)"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://github.com/crmne/chatwithwork-local-agent"
    
      8license=('MIT OR Apache-2.0')
    
      9install="${pkgname}.install"
    
      10depends=('gcc-libs' 'glibc')
    
      11makedepends=('git' 'cargo')
    
      12optdepends=('org.freedesktop.secrets: keep the device key in the Secret Service (GNOME Keyring, KWallet, KeePassXC)')
    
      13provides=('cww' 'chatwithwork-local-agent')
    
      14conflicts=('cww' 'chatwithwork-local-agent' 'chatwithwork-local-agent-bin')
    
      15options=('!debug' '!lto')
    
      16source=("${pkgname}::git+https://github.com/crmne/chatwithwork-local-agent.git")
    
      17sha256sums=('SKIP')
    
      18
    
      19pkgver() {
    
      20  cd "${srcdir}/${pkgname}"
    
      21  git describe --long --tags --abbrev=7 | sed 's/^v//;s/\-/.r/;s/\-g/./'
    
      22}
    
      23
    
      24prepare() {
    
      25  cd "${srcdir}/${pkgname}"
    
      26  export RUSTUP_TOOLCHAIN=stable
    
      27  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      28}
    
      29
    
      30build() {
    
      31  cd "${srcdir}/${pkgname}"
    
      32  export RUSTUP_TOOLCHAIN=stable
    
      33  export CARGO_TARGET_DIR=target
    
      34  export RUSTFLAGS="${RUSTFLAGS:-} --remap-path-prefix=${srcdir}=/"
    
      35  cargo build --frozen --release
    
      36}
    
      37
    
      38check() {
    
      39  cd "${srcdir}/${pkgname}"
    
      40  export RUSTUP_TOOLCHAIN=stable
    
      41  export CARGO_TARGET_DIR=target
    
      42  cargo test --frozen --release
    
      43}
    
      44
    
      45package() {
    
      46  cd "${srcdir}/${pkgname}"
    
      47  install -Dm755 target/release/cww "${pkgdir}/usr/bin/cww"
    
      48  install -Dm644 packaging/systemd/cww.service "${pkgdir}/usr/lib/systemd/user/cww.service"
    
      49  install -Dm644 README.md PROTOCOL.md SECURITY.md -t "${pkgdir}/usr/share/doc/${pkgname}/"
    
      50  install -Dm644 LICENSE-MIT LICENSE-APACHE -t "${pkgdir}/usr/share/licenses/${pkgname}/"
    
      51}
    
      52

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-25 09:11:17	Low	2