kortix-desktop

MEDIUM

maintainer insmtr 0 votes scanned 2026-10-17 07:17:15.137327

View on AUR

Why flagged

The package installs an unverifiable prebuilt AppImage from GitHub releases, which could be replaced with malicious code if the source is compromised, though it is from the project's official repository.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Medium AI review of an ambiguous pattern llm_review

The static rules found a suspicious pattern they could not resolve, so an AI model (qwen/qwen3-235b-a22b-2507) reviewed it and judged it MEDIUM (confidence 95%): The package installs an unverifiable prebuilt AppImage from GitHub releases, which could be replaced with malicious code if the source is compromised, though it is from the project's official repository.

PKGBUILD

      1# Maintainer: YOUR NAME <YOUR EMAIL>
    
      2pkgname=kortix-desktop
    
      3pkgver=0.14.0
    
      4pkgrel=2
    
      5pkgdesc='Kortix desktop application (official binary)'
    
      6arch=('x86_64')
    
      7url='https://kortix.com'
    
      8license=('Elastic-2.0')
    
      9depends=('alsa-lib' 'at-spi2-core' 'cairo' 'dbus' 'expat' 'gcc-libs'
    
      10         'glib2' 'glibc' 'gtk3' 'libcups' 'libdrm' 'libx11' 'libxcb'
    
      11         'libxcomposite' 'libxdamage' 'libxext' 'libxfixes' 'libxkbcommon'
    
      12         'libxrandr' 'mesa' 'nspr' 'nss' 'pango')
    
      13makedepends=('squashfs-tools')
    
      14optdepends=('xdg-utils: desktop integration')
    
      15options=('!strip' '!debug')
    
      16_image="Kortix-${pkgver}-x86_64.AppImage"
    
      17source=("https://github.com/kortix-ai/suna/releases/download/v${pkgver}/${_image}"
    
      18        "LICENSE-${pkgver}::https://raw.githubusercontent.com/kortix-ai/suna/v${pkgver}/LICENSE")
    
      19noextract=("${_image}")
    
      20sha256sums=('fd4a779b6e8664c675c7859b7dd711f6d03e3eb6a799dd98b44b1f8ee4ee1a14'
    
      21            '48255018b41fc0e965b1115af7e6779bc218bb8a6747d561da800d5022622aa2')
    
      22
    
      23prepare() {
    
      24  chmod +x "${_image}"
    
      25  "./${_image}" --appimage-extract
    
      26}
    
      27
    
      28package() {
    
      29  install -dm755 "${pkgdir}/opt/kortix-desktop" "${pkgdir}/usr/bin"
    
      30  cp -a squashfs-root/. "${pkgdir}/opt/kortix-desktop/"
    
      31  find "${pkgdir}/opt/kortix-desktop" -type d -exec chmod 755 {} +
    
      32
    
      33  # Use Chromium's setuid sandbox, never --no-sandbox.
    
      34  if [[ -f "${pkgdir}/opt/kortix-desktop/chrome-sandbox" ]]; then
    
      35    chmod 4755 "${pkgdir}/opt/kortix-desktop/chrome-sandbox"
    
      36  fi
    
      37  ln -s /opt/kortix-desktop/AppRun "${pkgdir}/usr/bin/kortix-desktop"
    
      38
    
      39  local desktop icon
    
      40  for desktop in squashfs-root/*.desktop; do
    
      41    [[ -f "${desktop}" ]] || continue
    
      42    install -Dm644 "${desktop}" "${pkgdir}/usr/share/applications/kortix-desktop.desktop"
    
      43    sed -i -E \
    
      44      -e 's|^Exec=.*|Exec=/usr/bin/kortix-desktop %U|' \
    
      45      -e 's|^Icon=.*|Icon=kortix-desktop|' \
    
      46      -e '/^TryExec=/d' \
    
      47      "${pkgdir}/usr/share/applications/kortix-desktop.desktop"
    
      48    break
    
      49  done
    
      50  test -f "${pkgdir}/usr/share/applications/kortix-desktop.desktop"
    
      51  # electron-builder places the application icon at the AppDir root.
    
      52  for icon in squashfs-root/*.png; do
    
      53    [[ -f "${icon}" ]] || continue
    
      54    install -Dm644 "${icon}" "${pkgdir}/usr/share/pixmaps/kortix-desktop.png"
    
      55    break
    
      56  done
    
      57  test -f "${pkgdir}/usr/share/pixmaps/kortix-desktop.png"
    
      58  install -Dm644 "LICENSE-${pkgver}" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      59}
    
      60

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-17 07:17:15	Medium	2