magewell-usb-capture-utility-bin
Downloads a prebuilt .deb from the official Magewell vendor domain (magewell.com) with a verified sha256 checksum; the binary is from the project's own official infrastructure, making this a normal binary repackage with low risk.
Triggered rules
zero_votes_recent
Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.
llm_review
The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Downloads a prebuilt .deb from the official Magewell vendor domain (magewell.com) with a verified sha256 checksum; the binary is from the project's own official infrastructure, making this a normal binary repackage with low risk.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:11
source=('https://www.magewell.com/files/tools/USBCaptureUtility3_deb_48315.zip')
PKGBUILD
1 offending line(s) highlighted# Maintainer: Dionicio3 (dionicio3@dionicio3.com)
pkgname=magewell-usb-capture-utility-bin
pkgver=3.0.5.48315
pkgrel=1
pkgdesc="Capture utility for Magewell USB capture cards"
arch=("x86_64")
url="https://www.magewell.com/downloads/usb-capture"
license=('unknown')
depends=('libusb>=1.0.0')
provides=('usbcaptureutility')
source=('https://www.magewell.com/files/tools/USBCaptureUtility3_deb_48315.zip')
sha256sums=('633c4b467a2fd0d81fcd840a29e12b039de76b1b9c75b6961bed29ff43150e74')
package() {
bsdtar -xf "${srcdir}"/USBCaptureUtility3_deb_48315/usbcaptureutility_3.0.5.48315Internal.deb
bsdtar -xf data.tar.xz -C "${pkgdir}"
chmod -R 755 "${pkgdir}"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-12 05:12:19 | Low | 3 |
| 2026-09-12 05:10:45 | Medium | 2 |