omarchy-stt-bin
The package installs a prebuilt binary from the project's GitHub release (normal for bin packages) and a machine learning model from a non-whitelisted host; the model is data, not executable code, and the worst case of a swap is degraded transcription, not code execution.
Triggered rules
llm_review
The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The package installs a prebuilt binary from the project's GitHub release (normal for bin packages) and a machine learning model from a non-whitelisted host; the model is data, not executable code, and the worst case of a swap is degraded transcription, not code execution.
1 higher static finding superseded - not the current verdict (shown for transparency)
source_untrusted_domain
One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).
-
PKGBUILD:20
"parakeet-v3-int8.tar.gz::https://blob.handy.computer/parakeet-v3-int8.tar.gz"
PKGBUILD
1 offending line(s) highlighted# Maintainer: Sebastian K <sjkouba@gmail.com>
pkgname=omarchy-stt-bin
pkgver=0.1.1
pkgrel=1
pkgdesc="Push-to-talk dictation system for Linux/Wayland with hotkey daemon and LLM corrections"
arch=('x86_64')
url="https://github.com/sebkouba/omarchy-stt"
license=('MIT')
depends=('wl-clipboard' 'ydotool' 'ffmpeg')
optdepends=(
'xdg-desktop-portal: For hotkey daemon global shortcuts'
'xdg-desktop-portal-hyprland: Hyprland integration'
'groq-api: For LLM post-processing (API key required)'
)
provides=('omarchy-stt')
conflicts=('omarchy-stt')
install=${pkgname}.install
source=(
"${pkgname}-${pkgver}.tar.gz::${url}/releases/download/v${pkgver}/omarchy-stt-${pkgver}-x86_64.tar.gz"
"parakeet-v3-int8.tar.gz::https://blob.handy.computer/parakeet-v3-int8.tar.gz"
)
sha256sums=('4e2c4ffae3c225e81acd3c15671bd2bf16bbd656faf156a220cba6c5fa816676'
'SKIP') # Parakeet model checksum - can be updated or left as SKIP
package() {
cd "${srcdir}/omarchy-stt-${pkgver}-x86_64"
# Install binaries
install -Dm755 "hotkey-daemon" "${pkgdir}/usr/bin/hotkey-daemon"
install -Dm755 "transcribe-daemon" "${pkgdir}/usr/bin/transcribe-daemon"
install -Dm755 "transcribe-client" "${pkgdir}/usr/bin/transcribe-client"
install -Dm755 "recording-daemon" "${pkgdir}/usr/bin/recording-daemon"
install -Dm755 "list-microphones" "${pkgdir}/usr/bin/list-microphones"
# Install systemd user services
install -Dm644 "systemd/recording-daemon.service" \
"${pkgdir}/usr/lib/systemd/user/recording-daemon.service"
install -Dm644 "systemd/transcribe-daemon.service" \
"${pkgdir}/usr/lib/systemd/user/transcribe-daemon.service"
install -Dm644 "systemd/hotkey-daemon.service" \
"${pkgdir}/usr/lib/systemd/user/hotkey-daemon.service"
# Install Parakeet model
install -dm755 "${pkgdir}/usr/share/omarchy-stt/models"
cp -r "${srcdir}/parakeet-tdt-0.6b-v3-int8" \
"${pkgdir}/usr/share/omarchy-stt/models/"
# Install example configuration
install -Dm644 "config/config.toml.example" \
"${pkgdir}/usr/share/omarchy-stt/config.toml.example"
if [ -f "config/transcription_corrections.json.example" ]; then
install -Dm644 "config/transcription_corrections.json.example" \
"${pkgdir}/usr/share/omarchy-stt/transcription_corrections.json.example"
fi
# Install documentation
install -Dm644 "README.md" "${pkgdir}/usr/share/doc/${pkgname}/README.md"
install -Dm644 "SETUP.md" "${pkgdir}/usr/share/doc/${pkgname}/SETUP.md"
install -Dm644 "LICENSE" "${pkgdir}/usr/share/licenses/${pkgname}/LICENSE"
}
Scan history
| Scanned at (UTC) | Severity | Rules |
|---|---|---|
| 2026-09-17 00:27:14 | Low | 2 |
| 2026-09-16 00:03:17 | Low | 2 |
| 2026-09-15 00:25:31 | Low | 2 |
| 2026-09-14 00:27:57 | Low | 2 |
| 2026-09-13 00:19:54 | Low | 2 |
| 2026-09-12 00:25:17 | Low | 2 |
| 2026-09-11 00:19:22 | Low | 2 |
| 2026-09-10 00:22:44 | Low | 2 |
| 2026-09-09 00:04:09 | Low | 2 |
| 2026-09-08 00:18:08 | Low | 2 |
| 2026-09-07 00:30:15 | Low | 2 |
| 2026-09-06 00:17:06 | Low | 2 |
| 2026-09-05 00:16:27 | Low | 2 |
| 2026-09-04 00:03:13 | Low | 2 |
| 2026-09-03 00:15:47 | Low | 2 |
| 2026-09-02 00:02:31 | Low | 2 |
| 2026-09-01 00:11:19 | Low | 2 |
| 2026-08-31 00:19:57 | Low | 2 |
| 2026-08-30 00:04:14 | Low | 2 |
| 2026-08-29 00:29:17 | Low | 2 |