mcp-toolbox-git

LOW

maintainer agony4001 0 votes scanned 2026-10-27 11:47:37.152749

View on AUR

Why flagged

The package builds from the project's own git repository on GitHub, which is a normal and legitimate AUR practice; the 'SKIP' checksum is acceptable for git sources, and no malicious activity or untrusted executable downloads are present.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package builds from the project's own git repository on GitHub, which is a normal and legitimate AUR practice; the 'SKIP' checksum is acceptable for git sources, and no malicious activity or untrusted executable downloads are present.

PKGBUILD

      1# Maintainer: agony <27015 at riseup dot net>
    
      2
    
      3pkgname=mcp-toolbox-git
    
      4pkgver=r2350.0c8a71d
    
      5pkgrel=1
    
      6pkgdesc='MCP server for databases (git version)'
    
      7arch=('x86_64' 'aarch64')
    
      8url='https://github.com/googleapis/mcp-toolbox'
    
      9license=('Apache-2.0')
    
      10depends=('glibc')
    
      11makedepends=('git' 'go')
    
      12provides=('mcp-toolbox')
    
      13conflicts=('mcp-toolbox')
    
      14source=("mcp-toolbox::git+${url}.git")
    
      15sha256sums=('SKIP')
    
      16
    
      17pkgver() {
    
      18  cd mcp-toolbox
    
      19  printf 'r%s.%s' "$(git rev-list --count HEAD)" "$(git rev-parse --short=7 HEAD)"
    
      20}
    
      21
    
      22prepare() {
    
      23  cd mcp-toolbox
    
      24  export GOPATH="${srcdir}/gopath"
    
      25  go mod download -x -modcacherw
    
      26}
    
      27
    
      28build() {
    
      29  cd mcp-toolbox
    
      30  export GOPATH="${srcdir}/gopath"
    
      31  export CGO_CPPFLAGS="${CPPFLAGS}"
    
      32  export CGO_CFLAGS="${CFLAGS}"
    
      33  export CGO_CXXFLAGS="${CXXFLAGS}"
    
      34  export CGO_LDFLAGS="${LDFLAGS}"
    
      35  export GOFLAGS='-buildmode=pie -trimpath -buildvcs=false -mod=readonly -modcacherw'
    
      36  go build -v -ldflags='-linkmode=external -X github.com/googleapis/mcp-toolbox/cmd.buildType=binary' -o mcp-toolbox .
    
      37}
    
      38
    
      39package() {
    
      40  install -Dm755 mcp-toolbox/mcp-toolbox -t "${pkgdir}/usr/bin"
    
      41}
    
      42

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-27 11:47:37	Low	2