prism-harness-suite-bin

LOW

maintainer marmai 0 votes scanned 2026-09-03 13:53:13.144096

View on AUR

Why flagged

The package downloads prebuilt binaries from a project-owned API endpoint with verifiable checksums; while the host is not on common whitelists, the binaries are not executed during build and the source is consistent with the project's official distribution, posing low risk.

Triggered rules

Low Few votes, recently uploaded zero_votes_recent

Uploaded within the last 14 days with 2 or fewer community votes — little peer review so far.

Low AI review llm_review

An AI model (qwen/qwen3-235b-a22b-2507) reviewed this and agrees it is LOW (confidence 95%): The package downloads prebuilt binaries from a project-owned API endpoint with verifiable checksums; while the host is not on common whitelists, the binaries are not executed during build and the source is consistent with the project's official distribution, posing low risk.

PKGBUILD

      1# Maintainer: Markus Maiwald <markus@maiwald.tk>
    
      2pkgname=prism-harness-suite-bin
    
      3_ver=1.0.0-rc.3
    
      4pkgver="${_ver//-/_}"
    
      5pkgrel=1
    
      6pkgdesc="PRISM harness suite for AI coding agents: doctrine, memory, reviews, model routing, compression, chat — prebuilt standalone binaries, no bun runtime needed"
    
      7arch=('x86_64')
    
      8url="https://getharness.app"
    
      9license=('custom:LSL-1.0')
    
      10provides=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober' 'prism-chat' 'prism-harness-suite')
    
      11conflicts=('prism-harness' 'prism-loop' 'prism-proxy' 'prism-route' 'prism-sober' 'prism-chat' 'prism-harness-suite')
    
      12options=('!strip')
    
      13_b="https://git.sovereign-society.org/api/packages/prism/generic/prism-harness-suite/$_ver"
    
      14source=("$_b/prism-harness-$_ver-linux-amd64.xz"
    
      15        "$_b/prism-loop-$_ver-linux-amd64.xz"
    
      16        "$_b/prism-sober-$_ver-linux-amd64.xz"
    
      17        "$_b/prism-route-$_ver-linux-amd64.xz"
    
      18        "$_b/prism-proxy-$_ver-linux-amd64.xz"
    
      19        "$_b/prism-chat-$_ver-linux-amd64.xz")
    
      20sha256sums=('a995225d5d035e2b55f8272007a03d8b0566c9356502b1dc8442abd271ba95fb'
    
      21            '8e901ec470ec9fb2b1d8864f749ced71c96ab83072e7c88be119ee4e71a9a53f'
    
      22            'b98492358df6dee94e296bf33e0427e2305a374d53e9786e8d7c4935af82fe59'
    
      23            '58689820014b2c48e104812066be26457ac8f0a140dfdc93aad910c9d9508af1'
    
      24            'e41ed58e4cd76e69c80c58fea8dd31bf48c54232d76009758a0f1840f93adb89'
    
      25            '2944f753b739e61b47d4750f4ab39d74f813436f461593b49fe1d3f1793ad564')
    
      26
    
      27# Single-file xz "archives": makepkg decompacts each to $srcdir keeping the
    
      28# full source name, without the exec bit — restore it before install.
    
      29_binaries=("prism-harness-$_ver-linux-amd64" "prism-loop-$_ver-linux-amd64"
    
      30           "prism-sober-$_ver-linux-amd64" "prism-route-$_ver-linux-amd64"
    
      31           "prism-proxy-$_ver-linux-amd64" "prism-chat-$_ver-linux-amd64")
    
      32
    
      33prepare() {
    
      34  cd "$srcdir"
    
      35  chmod +x "${_binaries[@]}"
    
      36}
    
      37
    
      38package() {
    
      39  cd "$srcdir"
    
      40  install -d "$pkgdir/usr/bin"
    
      41  # install each under its real CLI name
    
      42  install -m755 "${_binaries[0]}" "$pkgdir/usr/bin/prism-harness"
    
      43  install -m755 "${_binaries[1]}" "$pkgdir/usr/bin/prism-loop"
    
      44  install -m755 "${_binaries[2]}" "$pkgdir/usr/bin/prism-sober"
    
      45  install -m755 "${_binaries[3]}" "$pkgdir/usr/bin/prism-route"
    
      46  install -m755 "${_binaries[4]}" "$pkgdir/usr/bin/prism-proxy"
    
      47  install -m755 "${_binaries[5]}" "$pkgdir/usr/bin/prism-chat"
    
      48}
    
      49

Scan history

Scanned at (UTC)	Severity	Rules
2026-09-03 13:53:13	Low	2