intel-sde

LOW

maintainer xiota 4 votes scanned 2026-09-17 00:27:14.276658

View on AUR

Why flagged

The source is a legitimate Intel Software Development Emulator tarball from Intel's official download mirror; despite the non-whitelisted host, it is plausibly part of Intel's infrastructure and the package installs only unmodified binaries and links, with no execution of remote code or obfuscated payloads.

Triggered rules

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-2507) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a legitimate Intel Software Development Emulator tarball from Intel's official download mirror; despite the non-whitelisted host, it is plausibly part of Intel's infrastructure and the package installs only unmodified binaries and links, with no execution of remote code or obfuscated payloads.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:31 source=("https://downloadmirror.intel.com/${_pkgver%%::*}/$_pkgsrc.$_pkgext")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: aur.chaotic.cx
    
      2# Contributor: Marcel <aur-feedback [ät] marehr.dialup.fu-berlin.de>
    
      3
    
      4: ${_pkgver:=924984::10.13.1-2026-07-28}
    
      5
    
      6_pkgname="intel-sde"
    
      7pkgname="$_pkgname"
    
      8pkgver=$(sed -E -e 's&^.*::&&;s&-.*&&' <<< ${_pkgver:?})
    
      9pkgrel=1
    
      10pkgdesc="Intel Software Development Emulator"
    
      11url="https://software.intel.com/en-us/articles/intel-software-development-emulator/"
    
      12license=('LicenseRef-Intel-Simplified')
    
      13arch=('x86_64')
    
      14
    
      15depends=(
    
      16  'glibc'
    
      17)
    
      18optdepends=(
    
      19  'bash'
    
      20  'python'
    
      21  'python-distro'
    
      22)
    
      23
    
      24provides=("intel-xed")
    
      25conflicts=("intel-xed")
    
      26
    
      27options=('!debug' '!strip')
    
      28
    
      29_pkgsrc="sde-external-${_pkgver##*::}-lin"
    
      30_pkgext="tar.xz"
    
      31source=("https://downloadmirror.intel.com/${_pkgver%%::*}/$_pkgsrc.$_pkgext")
    
      32sha256sums=('94e97d623fec54385686e1e7ba65ebc9941748c05ee451423948334892bf2b50')
    
      33
    
      34package() {
    
      35  mkdir -pm755 "$pkgdir/opt/$_pkgname"
    
      36  mv "$_pkgsrc"/* "$pkgdir/opt/$_pkgname/"
    
      37
    
      38  mkdir -pm755 "$pkgdir/usr/bin"
    
      39  ln -srf "$pkgdir/opt/$_pkgname/sde64" "$pkgdir/usr/bin/intel-sde"
    
      40  ln -srf "$pkgdir/opt/$_pkgname/xed64" "$pkgdir/usr/bin/intel-xed"
    
      41
    
      42  mkdir -pm755 "$pkgdir/usr/share/licenses"
    
      43  ln -srf "$pkgdir/opt/$_pkgname/Licenses" "$pkgdir/usr/share/licenses/$pkgname"
    
      44}
    
      45

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-17 00:27:14	Low	2
2026-09-16 00:03:17	Low	2
2026-09-15 00:25:31	Low	2
2026-09-14 00:27:57	Low	2
2026-09-13 00:19:54	Low	2
2026-09-12 00:25:17	Low	2
2026-09-11 00:19:22	Low	2
2026-09-10 00:22:44	Low	2
2026-09-09 00:04:09	Low	2
2026-09-08 00:18:08	Low	2
2026-09-07 00:30:15	Low	2
2026-09-06 00:17:06	Low	2
2026-09-05 00:16:27	Low	2
2026-09-04 00:03:13	Low	2
2026-09-03 00:15:47	Low	2
2026-09-02 00:02:31	Low	2
2026-09-01 00:11:19	Low	2
2026-08-31 00:19:57	Low	2
2026-08-30 00:04:14	Low	2
2026-08-29 00:29:17	Low	2