csky-cpu-ck805f-csi-rtos-sdk

LOW

maintainer taotieren 0 votes base csky-cpu-i805-csi-rtos-sdk scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The package downloads a zip file and PDFs from an Alibaba Cloud OSS host, which is non-standard but plausibly part of the official T-Head (C-Sky) ecosystem; the zip is extracted and installed as-is without execution, and PDFs are documentation, posing minimal risk.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads a zip file and PDFs from an Alibaba Cloud OSS host, which is non-standard but plausibly part of the official T-Head (C-Sky) ecosystem; the zip is extracted and installed as-is without execution, and PDFs are documentation, posing minimal risk.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:16 "csky-cpu-ck805f-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/cop-image-prod/resource/420257228264570880/1577156380500/SmartL_CK805F-v1.6.zip"

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: taotieren <admin@taotieren.com>
    
      2
    
      3pkgbase=csky-cpu-i805-csi-rtos-sdk
    
      4pkgname=($pkgbase csky-cpu-ck805f-csi-rtos-sdk csky-cpu-i805-csi-nn-vdsp2-guide)
    
      5pkgver=1.6
    
      6pkgrel=1
    
      7arch=('x86_64')
    
      8url='https://occ.t-head.cn/community/download?id=581557831434502144'
    
      9license=('unkown')
    
      10provides=()
    
      11#conflicts=()
    
      12depends=()
    
      13makedepends=('libarchive')
    
      14
    
      15source=(
    
      16        "csky-cpu-ck805f-csi-rtos-sdk-${pkgver}.zip::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/cop-image-prod/resource/420257228264570880/1577156380500/SmartL_CK805F-v1.6.zip"
    
      17        "CSI-NN-VDSP2_v1.2.0.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/cop-image-prod/resource/420257228264570880/1585134607967/CSI-NN-VDSP2_v1.2.0.pdf"
    
      18        "CSI-VDSP2-I_v2.8.0.pdf::https://occ-oss-prod.oss-cn-hangzhou.aliyuncs.com/cop-image-prod/resource/420257228264570880/1585134574910/CSI-VDSP2-I_v2.8.0.pdf"
    
      19        )
    
      20
    
      21sha256sums=('43575274e71367ec66ed1c659f8884d40f1d9aba0a0621d43a99ca4d53fb23d4'
    
      22            '226099d76a268117bc9f9faa653bc6161c28fc1fe746e19a7b881cce16e1aad7'
    
      23            'ce11d9e3dfa95e1ba7deae47114b000d4323e4f6429b50ac116ac590f3b5c5cd')
    
      24
    
      25noextract=(csky-cpu-ck805f-csi-rtos-sdk-${pkgver}.zip)
    
      26
    
      27package_csky-cpu-i805-csi-rtos-sdk() {
    
      28    pkgdesc="C-Sky CPU i805 CSI-RTOS SDK (ALL)"
    
      29    depends=(csky-cpu-ck805f-csi-rtos-sdk csky-cpu-i805-csi-nn-vdsp2-guide)
    
      30}
    
      31
    
      32package_csky-cpu-ck805f-csi-rtos-sdk() {
    
      33    pkgdesc="C-Sky CPU CK805F CSI-RTOS SDK"
    
      34    install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
    
      35    bsdtar xf "${srcdir}/${pkgname}-${pkgver}.zip" --strip-components=1 -C  "${pkgdir}/opt/t-head/cpu/${pkgname}"
    
      36}
    
      37
    
      38package_csky-cpu-i805-csi-nn-vdsp2-guide() {
    
      39    pkgdesc="C-Sky CPU I805 CSI NN & VDSP2 guide"
    
      40    install -dm0755 "${pkgdir}/opt/t-head/cpu/${pkgname}"
    
      41    cp -r "${srcdir}"/*.pdf "${pkgdir}/opt/t-head/cpu/${pkgname}"
    
      42}
    
      43# vim: ts=4 sw=4 et
    
      44

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2