grok-bot

maintainer petrouil · 1 votes · scanned 2026-08-18 00:03:42.021799

MEDIUM

Why flagged Installs a prebuilt binary .deb extracted from downloads.cursor.com (Cursor's CDN), which is plausibly the project's own infrastructure, but the package claims to be a 'Grok Bot desktop agent' while the URL and files reference 'cursor.com' and 'sand', suggesting a mislabeled or repackaged binary from an unrelated project; the prebuilt executable is never built from source and the provenance mismatch warrants caution.

Triggered rules

MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:13 source=("${pkgname}_${pkgver}.deb::https://downloads.cursor.com/sand/stable/076e9d4bf42abbfa576702aea18ddbc49d9d3ab5/linux/x64/Grok_Bot_${pkgver}.deb")

LOW Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

MEDIUM AI review llm_review

An AI model (anthropic/claude-sonnet-4.6) reviewed this and agrees it is MEDIUM (confidence 70%): Installs a prebuilt binary .deb extracted from downloads.cursor.com (Cursor's CDN), which is plausibly the project's own infrastructure, but the package claims to be a 'Grok Bot desktop agent' while the URL and files reference 'cursor.com' and 'sand', suggesting a mislabeled or repackaged binary from an unrelated project; the prebuilt executable is never built from source and the provenance mismatch warrants caution.

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: petrouil
    
      2pkgname=grok-bot
    
      3pkgver=0.16.0
    
      4pkgrel=1
    
      5pkgdesc='Grok Bot desktop agent'
    
      6arch=('x86_64')
    
      7url='https://cursor.com'
    
      8license=('custom')
    
      9depends=('gtk3' 'libnotify' 'nss' 'libxss' 'libxtst' 'xdg-utils' 'at-spi2-core' 'util-linux-libs' 'libsecret')
    
      10optdepends=('libappindicator-gtk3: tray support')
    
      11makedepends=('dpkg')
    
      12options=('!strip')
    
      13source=("${pkgname}_${pkgver}.deb::https://downloads.cursor.com/sand/stable/076e9d4bf42abbfa576702aea18ddbc49d9d3ab5/linux/x64/Grok_Bot_${pkgver}.deb")
    
      14sha256sums=('99d8b396641941ba4b889a791e9306737b398c0c3934f63a9545430910192bcc')
    
      15
    
      16prepare() {
    
      17    dpkg-deb -x "${pkgname}_${pkgver}.deb" "${srcdir}/deb"
    
      18}
    
      19
    
      20package() {
    
      21    cp -a "${srcdir}/deb/." "${pkgdir}/"
    
      22    install -Dm644 "${srcdir}/deb/usr/share/icons/hicolor/1024x1024/apps/sand.png" \
    
      23        "${pkgdir}/usr/share/icons/hicolor/512x512/apps/sand.png"
    
      24    if ! { [[ -L /proc/self/ns/user ]] && unshare --user true; }; then
    
      25        chmod 4755 "${pkgdir}/opt/Grok Bot/chrome-sandbox"
    
      26    fi
    
      27}

Scan history

Scanned at (UTC)	Severity	Rules
2026-08-18 00:03:42	MEDIUM	3
2026-08-17 00:18:29	MEDIUM	3
2026-08-16 00:03:42	MEDIUM	3
2026-08-15 00:26:13	MEDIUM	3
2026-08-14 00:03:41	MEDIUM	3
2026-08-13 00:17:07	MEDIUM	3
2026-08-12 21:26:44	MEDIUM	3
2026-08-12 21:24:53	MEDIUM	3