noos-agent

LOW

maintainer chomiam 0 votes scanned 2026-10-19 21:31:03.304715

View on AUR

Why flagged

Source is a tarball from the maintainer's own self-hosted Gitea instance (plausibly the project's own infrastructure), built from source with cargo/bun; the non-whitelisted host and few votes are minor concerns but this is a normal own-source build, not a prebuilt binary from an unrelated swappable host.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (anthropic/claude-sonnet-4.6) reviewed the full PKGBUILD and judged it LOW (confidence 70%): Source is a tarball from the maintainer's own self-hosted Gitea instance (plausibly the project's own infrastructure), built from source with cargo/bun; the non-whitelisted host and few votes are minor concerns but this is a normal own-source build, not a prebuilt binary from an unrelated swappable host.

1 higher static finding superseded - not the current verdict (shown for transparency)

Medium source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

PKGBUILD:39 source=("${pkgname}-${pkgver}.tar.gz::https://gitea.cloud-box.ovh/chomiam/noos-agent/archive/v${pkgver}.tar.gz")

PKGBUILD

1 offending line(s) highlighted

      1# Maintainer: Axel Valens (chomiam) <axel.valens@gmail.com>
    
      2pkgname=noos-agent
    
      3pkgver=0.1.0
    
      4pkgrel=1
    
      5pkgdesc="Hybrid Local AI Desktop Workbench (llama.cpp ROCm/CUDA/Vulkan, Stable Diffusion, Multi-Agent Orchestrator & Web Skills)"
    
      6arch=('x86_64' 'aarch64')
    
      7url="https://gitea.cloud-box.ovh/chomiam/noos-agent"
    
      8license=('MIT')
    
      9depends=(
    
      10  'cairo'
    
      11  'gcc-libs'
    
      12  'gdk-pixbuf2'
    
      13  'glib2'
    
      14  'glibc'
    
      15  'gtk3'
    
      16  'hicolor-icon-theme'
    
      17  'libsoup3'
    
      18  'openssl'
    
      19  'pango'
    
      20  'webkit2gtk-4.1'
    
      21)
    
      22makedepends=(
    
      23  'bun'
    
      24  'cargo'
    
      25  'git'
    
      26  'pkgconf'
    
      27)
    
      28optdepends=(
    
      29  'llama.cpp: Local GGUF LLM inference engine (llama-server / llama serve)'
    
      30  'rocm-hip-runtime: AMD ROCm GPU hardware acceleration'
    
      31  'cuda: NVIDIA CUDA GPU hardware acceleration'
    
      32  'vulkan-icd-loader: Vulkan GPU acceleration for stable-diffusion.cpp'
    
      33  'cmake: Automated local compilation of stable-diffusion.cpp'
    
      34  'grim: Wayland desktop screenshot capture for the vision agent'
    
      35  'scrot: X11 desktop screenshot capture for the vision agent'
    
      36  'github-cli: GitHub PR, Issue & Actions workflow integration'
    
      37)
    
      38options=('!lto')
    
      39source=("${pkgname}-${pkgver}.tar.gz::https://gitea.cloud-box.ovh/chomiam/noos-agent/archive/v${pkgver}.tar.gz")
    
      40sha256sums=('bd837a1767d7bf9f54b2bf84b7bea5bcea0dded99151660c5b298575a45f0fb9')
    
      41
    
      42prepare() {
    
      43  cd "${srcdir}/${pkgname}"
    
      44  export RUSTUP_TOOLCHAIN=stable
    
      45  cargo fetch --locked --target "$(rustc -vV | sed -n 's/host: //p')"
    
      46  bun install --frozen-lockfile
    
      47}
    
      48
    
      49build() {
    
      50  cd "${srcdir}/${pkgname}"
    
      51  export RUSTUP_TOOLCHAIN=stable
    
      52  export CARGO_TARGET_DIR=target
    
      53  bun run build
    
      54  cargo build --frozen --release -p noos-agent
    
      55}
    
      56
    
      57check() {
    
      58  cd "${srcdir}/${pkgname}"
    
      59  export RUSTUP_TOOLCHAIN=stable
    
      60  export CARGO_TARGET_DIR=target
    
      61  cargo test --frozen -p noos-agent-core
    
      62}
    
      63
    
      64package() {
    
      65  cd "${srcdir}/${pkgname}"
    
      66  install -Dm755 "target/release/noos-agent" "${pkgdir}/usr/bin/noos-agent"
    
      67  install -Dm644 "packaging/noos-agent.desktop" "${pkgdir}/usr/share/applications/noos-agent.desktop"
    
      68  install -Dm644 "noos-svg.svg" "${pkgdir}/usr/share/icons/hicolor/scalable/apps/noos-agent.svg"
    
      69  install -Dm644 "src-tauri/icons/32x32.png" "${pkgdir}/usr/share/icons/hicolor/32x32/apps/noos-agent.png"
    
      70  install -Dm644 "src-tauri/icons/128x128.png" "${pkgdir}/usr/share/icons/hicolor/128x128/apps/noos-agent.png"
    
      71  install -Dm644 "src-tauri/icons/128x128@2x.png" "${pkgdir}/usr/share/icons/hicolor/256x256/apps/noos-agent.png"
    
      72  install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
    
      73  install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
    
      74}
    
      75

Scan history

Scanned at (UTC)	Severity	Rules
2026-10-19 21:31:03	Low	3
2026-10-19 21:26:37	Medium	2