◎ AURWatch - AUR Security Monitor
scan coverage …
Last scan …
Next scan -

daggerfall-addons

maintainer lauramasseron · 5 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The package downloads addon files for a game from uesp.net and its subdomains, which are community-maintained fan content repositories; these are non-executable data files (game assets, patches) installed into the game's data directory, and the sources, while on non-whitelisted hosts, are plausibly legitimate for the modding community, with no code execution or remote script loading involved.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package downloads addon files for a game from uesp.net and its subdomains, which are community-maintained fan content repositories; these are non-executable data files (game assets, patches) installed into the game's data directory, and the sources, while on non-whitelisted hosts, are plausibly legitimate for the modding community, with no code execution or remote script loading involved.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:13 source=(http://images.uesp.net//9/9d/Fixqs001.zip
  • PKGBUILD:14 http://www.uesp.net/dagger/files/xtraqst.zip

PKGBUILD

2 offending line(s) highlighted
1# Maintainer: Andrzej Giniewicz <gginiu@gmail.com>
2pkgname=daggerfall-addons
3pkgver=20110716
4pkgrel=2
5pkgdesc="The Elder Scrolls II: Daggerfall, unofficial Add-Ons"
6arch=('any')
7url="http://www.uesp.net/wiki/Daggerfall:Files#Unofficial_Add-Ons"
8license=('custom:daggerfall')
9depends=("daggerfall" "daggerfall-fixes")
10makedepends=("unzip")
11options=(!emptydirs)
12install="addons.install"
13source=(http://images.uesp.net//9/9d/Fixqs001.zip
14 http://www.uesp.net/dagger/files/xtraqst.zip
15 http://www.uesp.net/dagger/files/xtraqst2.zip
16 http://images.uesp.net//0/0d/Xtraqst3.zip
17 http://www.uesp.net/dagger/files/xqse.zip
18 http://www.uesp.net/dagger/files/xqpatch.zip
19 http://images.uesp.net//3/34/Lbsword.zip
20 http://www.uesp.net/dagger/files/addtext.zip
21 http://www.uesp.net/w/images/a/ab/BrenRSC1.zip
22 http://www.uesp.net/w/images/6/69/BrenRSC2.zip
23 http://images.uesp.net//5/5e/MountedGuards.zip
24 http://images.uesp.net//0/04/WeaponsFall.zip
25 http://images.uesp.net//9/9c/ArmorFall.zip
26 http://images.uesp.net//c/c3/ClothesFall.zip
27 http://images.uesp.net//f/f8/WomenFall.zip
28 http://www.uesp.net/dagger/files/andyfall.zip
29 andyfall-clothes.patch andyfall-armor.patch andyfall.patch)
30noextract=(xtraqst.zip xtraqst2.zip Xtraqst3.zip xqse.zip xqpatch.zip Lbsword.zip
31 MountedGuards.zip WeaponsFall.zip ArmorFall.zip ClothesFall.zip WomenFall.zip
32 addtext.zip BrenRSC1.zip BrenRSC2.zip Fixqs001.zip)
33md5sums=('4b8d31d14f3ee8c7400bdf8c9768aa1c'
34 'bfda6a00f48aec717a9811debb594050'
35 '2e05d882d5d3750142e5dc513064e639'
36 'd10f136d77d514c1ff932fea49c9739c'
37 '85b487fbbd0999660391c9e796664626'
38 'b802a0e83d4c7aa707f681540758ca54'
39 'fd07e8b79ec015421bae0e4ddaeee002'
40 '13d33aae6edc1abaf6e060e775873588'
41 '50711bb9b198972c41a9e8b9c74559ba'
42 'b98a33fd5498621265521847519c64d1'
43 '9a27ce990dc32df5f92cb5a841b6ceaa'
44 'ae5d7a13120754e3f1574767958977a7'
45 '567f827b27536c740459269a02869c14'
46 '3ceea5532385b3c77a5d38e971915c1e'
47 '6fd1aa6fae821a86bf5f41fca20c52a7'
48 '616dc4a41ca41f4e840d7d1ccbd2234f'
49 '562ce2074af5bc90bc1605a47f836f32'
50 '84a8c8a72c4170a2b2914b778e5d54f8'
51 'e81bc2c89560d7e486a487aa1ea83264')
52
53package() {
54 cd "$srcdir"
55 _target="${pkgdir}"/usr/share/games/daggerfall
56 install -d -m775 "$_target"
57 _target="$_target"/mods
58 install -d -m775 "$_target"
59
60 cd "$_target"
61 echo "andyfall-fixes" > andyfall-lite.extends
62 echo "andyfall-fixes" > andyfall.extends
63
64 cd "$_target"
65 install -d fixqs001-addons/ARENA2
66 cd fixqs001-addons/ARENA2
67 unzip "$srcdir"/Fixqs001.zip
68 rm readme.pqs
69 rm 40c00y00.qbn
70 rm 40c00y00.qrc
71 rm a0c00y12.qbn
72 rm a0c00y12.qrc
73 rm c0b00y02.qbn
74 rm c0b00y02.qrc
75 rm c0c00y10.qbn
76 rm c0c00y10.qrc
77 rm o0b00y00.qbn
78 rm o0b00y00.qrc
79 rm o0b10y00.qbn
80 rm o0b10y00.qrc
81 rm r0c30y25.qbn
82 rm r0c30y25.qrc
83 rm r0c4xy23.qbn
84 rm r0c4xy23.qrc
85 rm s0000999.qbn
86 rm s0000999.qrc
87 rm s0000007.qbn
88 rm s0000007.qrc
89 rm s0000004.qbn
90 rm s0000004.qrc
91 ls | while read file; do mv $file `echo $file | sed 's/.*/\U&/'`; done
92 cd "$_target"
93 echo "fixqs001-addons" > addons.extends
94
95 cd "$_target"
96 install -d extra_quests_1/ARENA2
97 cd extra_quests_1/ARENA2
98 unzip "$srcdir"/xtraqst.zip
99 rm README.TXT
100 cd "$_target"
101 echo "extra_quests_1" >> addons.extends
102
103 cd "$_target"
104 install -d extra_quests_2/ARENA2
105 cd extra_quests_2/ARENA2
106 unzip "$srcdir"/xtraqst2.zip
107 rm README.TXT
108 cd "$_target"
109 echo "extra_quests_2" >> addons.extends
110
111 cd "$_target"
112 install -d extra_quests_3/ARENA2
113 cd extra_quests_3/ARENA2
114 unzip "$srcdir"/Xtraqst3.zip
115 rm README.TXT
116 cd "$_target"
117 echo "extra_quests_3" >> addons.extends
118
119 cd "$_target"
120 install -d extra_quests_se/ARENA2
121 cd extra_quests_se/ARENA2
122 unzip "$srcdir"/xqse.zip
123 rm README.TXT
124 cd "$_target"
125 echo "extra_quests_1" > extra_quests_se.extends
126 echo "extra_quests_se" >> addons.extends
127
128 cd "$_target"
129 install -d extra_quests_patch-addons/ARENA2
130 cd extra_quests_patch-addons/ARENA2
131 unzip "$srcdir"/xqpatch.zip
132 rm PATCH.TXT
133 rm Q0C00Y03.QBN
134 rm Q0C00Y03.QRC
135 cd "$_target"
136 echo "extra_quests_2" > extra_quests_patch-addons.extends
137 echo "extra_quests_se" >> extra_quests_patch-addons.extends
138 echo "extra_quests_patch-addons" >> addons.extends
139
140 cd "$_target"
141 install -d live_by_the_sword/ARENA2
142 cd live_by_the_sword/ARENA2
143 unzip "$srcdir"/Lbsword.zip
144 mv quests ..
145 rm -rf *
146 mv ../quests/* .
147 rm -rf ../quests
148 ls | while read file; do mv $file `echo $file | sed 's/.*/\U&/'`; done
149 cd "$_target"
150 echo "live_by_the_sword" >> addons.extends
151
152 cd "$_target"
153 install -d added_text/ARENA2
154 cd added_text/ARENA2
155 unzip "$srcdir"/addtext.zip
156 rm text.txt
157 mv Text.rsc TEXT.RSC
158
159 cd "$_target"
160 install -d brendan_text/ARENA2
161 cd brendan_text/ARENA2
162 unzip "$srcdir"/BrenRSC1.zip
163 rm BrenRSC1.txt
164 mv Brendan1.rsc TEXT.RSC
165
166 cd "$_target"
167 install -d brendan_straight_text/ARENA2
168 cd brendan_straight_text/ARENA2
169 unzip "$srcdir"/BrenRSC2.zip
170 rm BrenRSC2.txt
171 mv Brendan2.rsc TEXT.RSC
172 cd "$_target"
173 echo "brendan_straight_text" >> addons.extends
174
175 cd "$_target"
176 install -d andyfall-mounted_guards/ARENA2
177 cd andyfall-mounted_guards/ARENA2
178 unzip "$srcdir"/MountedGuards.zip
179 rm readme.txt
180 rm -rf BAK
181 cd "$_target"
182 echo "andyfall-mounted_guards" >> andyfall-lite.extends
183 echo "andyfall-mounted_guards" >> andyfall.extends
184 echo "andyfall-mounted_guards" >> addons.extends
185
186 cd "$_target"
187 install -d andyfall-weapons/ARENA2
188 cd andyfall-weapons/ARENA2
189 unzip "$srcdir"/WeaponsFall.zip
190 rm readme.txt
191 rm -rf BAK
192 cd "$_target"
193 echo "andyfall-weapons" >> andyfall-lite.extends
194 echo "andyfall-weapons" >> andyfall.extends
195 echo "andyfall-weapons" >> addons.extends
196
197 cd "$_target"
198 install -d andyfall-armor/ARENA2
199 cd andyfall-armor/ARENA2
200 unzip "$srcdir"/ArmorFall.zip
201 rm readme.txt
202 rm -rf BAK
203 cd "$_target"
204 mv "$srcdir"/andyfall-armor.patch .
205 echo "andyfall-armor" >> andyfall-lite.extends
206 echo "andyfall-armor" >> andyfall.extends
207 echo "andyfall-armor" >> addons.extends
208
209 cd "$_target"
210 install -d andyfall-clothes/ARENA2
211 cd andyfall-clothes/ARENA2
212 unzip "$srcdir"/ClothesFall.zip
213 rm readme.txt
214 rm -rf BAK
215 cd "$_target"
216 mv "$srcdir"/andyfall-clothes.patch .
217 echo "andyfall-clothes" >> andyfall-lite.extends
218 echo "andyfall-clothes" >> andyfall.extends
219 echo "andyfall-clothes" >> addons.extends
220
221 cd "$_target"
222 install -d andyfall-women/ARENA2
223 cd andyfall-women/ARENA2
224 unzip "$srcdir"/WomenFall.zip
225 rm readme.txt
226 rm -rf BAK
227 cd "$_target"
228 echo "andyfall-women" >> andyfall-lite.extends
229 echo "andyfall-women" >> andyfall.extends
230 echo "andyfall-women" >> addons.extends
231
232 install -d andyfall/ARENA2
233 cd andyfall/ARENA2
234 cp "$srcdir"/ANDYFALL/ARENA2/CLASS* .
235 cd "$_target"
236 echo "andyfall-lite" >> andyfall.extends
237 mv "$srcdir"/andyfall.patch .
238}
239
240

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion