grok-bot

MEDIUM

maintainer orphaned 1 votes scanned 2026-10-02 00:00:32.890515

View on AUR

Why flagged

Installs a prebuilt binary .deb extracted from downloads.cursor.com (Cursor's CDN), which is plausibly the project's own infrastructure, but the package claims to be a 'Grok Bot desktop agent' while the URL and files reference 'cursor.com' and 'sand', suggesting a mislabeled or repackaged binary from an unrelated project; the prebuilt executable is never built from source and the provenance mismatch warrants caution.

Triggered rules

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("${pkgname}_${pkgver}.deb::https://downloads.cursor.com/sand/stable/076e9d4bf42abbfa576702aea18ddbc49d9d3ab5/linux/x64/Grok_Bot_${pkgver}.deb")

Medium AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Installs a prebuilt binary .deb extracted from downloads.cursor.com (Cursor's CDN), which is plausibly the project's own infrastructure, but the package claims to be a 'Grok Bot desktop agent' while the URL and files reference 'cursor.com' and 'sand', suggesting a mislabeled or repackaged binary from an unrelated project; the prebuilt executable is never built from source and the provenance mismatch warrants caution.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: petrouil
    
      2pkgname=grok-bot
    
      3pkgver=0.16.0
    
      4pkgrel=1
    
      5pkgdesc='Grok Bot desktop agent'
    
      6arch=('x86_64')
    
      7url='https://cursor.com'
    
      8license=('custom')
    
      9depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'at-spi2-core' 'util-linux-libs' 'libsecret')
    
      10optdepends=('libappindicator-gtk3: tray support')
    
      11makedepends=('dpkg')
    
      12options=('!strip')
    
      13source=("${pkgname}_${pkgver}.deb::https://downloads.cursor.com/sand/stable/076e9d4bf42abbfa576702aea18ddbc49d9d3ab5/linux/x64/Grok_Bot_${pkgver}.deb")
    
      14sha256sums=('99d8b396641941ba4b889a791e9306737b398c0c3934f63a9545430910192bcc')
    
      15
    
      16prepare() {
    
      17    dpkg-deb -x "${pkgname}_${pkgver}.deb" "${srcdir}/deb"
    
      18}
    
      19
    
      20package() {
    
      21    cp -a "${srcdir}/deb/." "${pkgdir}/"
    
      22    install -Dm644 "${srcdir}/deb/usr/share/icons/hicolor/1024x1024/apps/sand.png" \
    
      23        "${pkgdir}/usr/share/icons/hicolor/512x512/apps/sand.png"
    
      24    if ! { [[ -L /proc/self/ns/user ]] && unshare --user true; }; then
    
      25        chmod 4755 "${pkgdir}/opt/Grok Bot/chrome-sandbox"
    
      26    fi
    
      27}

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-02 00:00:32	Medium	2
2026-10-01 00:02:06	Medium	2
2026-09-30 00:20:07	Medium	2
2026-09-29 00:07:46	Medium	2
2026-09-28 00:28:32	Medium	2
2026-09-27 00:07:07	Medium	2
2026-09-26 00:12:15	Medium	2
2026-09-25 00:03:36	Medium	2
2026-09-24 00:24:14	Medium	2
2026-09-23 00:28:13	Medium	2
2026-09-22 00:15:14	Medium	2
2026-09-21 00:26:32	Medium	2
2026-09-20 00:25:31	Medium	2
2026-09-19 00:25:36	Medium	2
2026-09-18 00:17:11	Medium	2
2026-09-17 00:27:14	Medium	2
2026-09-16 00:03:17	Medium	2
2026-09-15 00:25:31	Medium	2
2026-09-14 00:27:57	Medium	2
2026-09-13 00:19:54	Medium	2