prey-demo

maintainer Slash · 8 votes · scanned 2026-08-03 00:08:14.047287
LOW
View on AUR ↗
Why flagged The source is a prebuilt installer binary from icculus.org, a well-known and trusted host for open-source game ports; while not on a standard whitelist, it is plausibly official and the package installs only data and binaries from that source without executing arbitrary remote code or exhibiting malicious behavior.

Triggered rules

LOW AI review downgraded a static finding llm_review

The static rules flagged this MEDIUM, but an AI model (qwen/qwen3-235b-a22b-07-25) reviewed the full PKGBUILD and judged it LOW (confidence 95%): The source is a prebuilt installer binary from icculus.org, a well-known and trusted host for open-source game ports; while not on a standard whitelist, it is plausibly official and the package installs only data and binaries from that source without executing arbitrary remote code or exhibiting malicious behavior.

1 higher static finding superseded - not the current verdict (shown for transparency)
MEDIUM source=() URL on a non-standard host source_untrusted_domain

One or more source=() URLs point to a host outside the trusted allowlist (github.com, gitlab.com, codeberg.org, pypi.org, …).

  • PKGBUILD:15 "https://icculus.org/prey/downloads/$pkgname-installer-$pkgver.bin")

PKGBUILD

1 offending line(s) highlighted
1# Maintainer: Slash <demodevil5 [at] yahoo [dot] com>
2
3pkgname=prey-demo
4pkgver=02192009
5pkgrel=1
6pkgdesc="Prey is a first person shooter based on the id Tech 4 engine using portals and variable gravity (Demo Version)."
7arch=('i686' 'x86_64')
8url="https://icculus.org/prey/"
9license=('custom')
10depends_x86_64=('lib32-libstdc++5' 'lib32-libxext' 'lib32-openal' 'lib32-sdl')
11depends_i686=('libstdc++5' 'libxext' 'openal' 'sdl')
12makedepends=('unzip')
13install=prey-demo.install
14source=("prey-demo.desktop" "prey-demo.launcher" \
15"https://icculus.org/prey/downloads/$pkgname-installer-$pkgver.bin")
16sha256sums=('f6df59507716e780fc5055356616d7b9310639a0332ca4830bef71cb7e72b074'
17 '9ad1b50e362bc9843b54b237722be10332e902a32b0839f2c01a700f82ef0fd7'
18 'cd2c179bb69224157411d90d7b613a3ce7a8214813c947ed7ccb2df5e15835f4')
19
20package() {
21 # Create Destination Directory
22 install -d "$pkgdir/opt/prey-demo/"
23
24 # Install Game Files
25 cp -r "$srcdir/data/prey-demo-linux-x86/"* \
26 "$pkgdir/opt/prey-demo/"
27
28 # Install Data Files
29 cp -r "$srcdir/data/prey-demo-linux-data/"* \
30 "$pkgdir/opt/prey-demo/"
31
32 # Install Punkbuster Files
33 cp -r "$srcdir/data/punkbuster-linux-x86/"* \
34 "$pkgdir/opt/prey-demo/"
35
36 # Install Default Config
37 cp "$srcdir/data/configs/english.cfg" \
38 "$pkgdir/opt/prey-demo/base/default.cfg"
39
40 # Install License (Prey)
41 install -D -m 0644 "$srcdir/data/prey_demo_license.txt" \
42 "$pkgdir/usr/share/licenses/$pkgname/prey_demo_license.txt"
43
44 # Install License (Punkbuster)
45 install -D -m 0644 "$srcdir/data/punkbuster_license.txt" \
46 "$pkgdir/usr/share/licenses/$pkgname/punkbuster_license.txt"
47
48 # Install Desktop Shortcut
49 install -D -m 0644 "$srcdir/prey-demo.desktop" \
50 "$pkgdir/usr/share/applications/prey-demo.desktop"
51
52 # Install Client Launcher
53 install -D -m 0755 "$srcdir/prey-demo.launcher" \
54 "$pkgdir/usr/bin/prey-demo"
55}
56
57

Scan history

Scanned at (UTC)SeverityRules
2026-08-03 00:08:14 LOW 2
2026-08-02 00:16:08 LOW 2
2026-08-01 00:11:18 LOW 2
2026-07-31 00:14:10 LOW 2
2026-07-30 00:17:23 LOW 2
2026-07-29 00:25:53 LOW 2
2026-07-28 00:07:28 LOW 2
2026-07-27 00:24:32 LOW 2
2026-07-26 00:07:32 LOW 2
2026-07-25 00:13:44 LOW 2
2026-07-24 00:02:28 LOW 2
2026-07-23 00:14:47 LOW 2
2026-07-22 00:29:32 LOW 2
2026-07-21 00:24:15 LOW 2
2026-07-20 00:19:49 LOW 2
2026-07-19 00:17:08 LOW 2
2026-07-18 00:14:48 LOW 2
2026-07-17 00:06:16 LOW 2
2026-07-16 00:05:41 LOW 2
2026-07-15 00:09:25 LOW 2

Report a package

Reports go to the AURWatch maintainer (one person) and are read by hand. No login required.

0 / 4000
Your suggestion